Bugtraq mailing list archives
Re: CitrusDB 2.4.1 - LFI/SQLi Vulnerability
From: mbsarwin () singnset com sg
Date: Tue, 10 Jul 2012 15:23:12 GMT
Hi I tried this LFI. it does not display the /etc/password file. So ver 2.4.1. seems protected. looks like it is a false alarm.
Current thread:
- Re: CitrusDB 2.4.1 - LFI/SQLi Vulnerability mbsarwin (Jul 11)