WebApp Sec mailing list archives

Re: PHP Directory Transversal

From: Richard Moore <rich () westpoint ltd uk>
Date: Thu, 10 Mar 2005 14:41:16 +0000


Andres Molinetti wrote:

www.example.com/static.php?page=../../../../../../etc/passwd
but I get an error saying that file doesn't exist.


Have you checked if it's a windows box? ;-)

Rich.
--
Richard Moore, Principle Software Engineer,
Westpoint Ltd,
Albion Wharf, 19 Albion Street, Manchester, M1 5LN, England
Tel: +44 161 237 1028
Fax: +44 161 237 1031

Current thread:

PHP Directory Transversal Andres Molinetti (Mar 13)
- Re: PHP Directory Transversal Felikz (Mar 13)
  - Re: PHP Directory Transversal Andres Molinetti (Mar 13)
    - RE: PHP Directory Transversal Mehmet Buyukozer (Mar 13)
- Re: PHP Directory Transversal Richard Moore (Mar 13)
- Re: PHP Directory Transversal Sarath Kummamuru (Mar 13)
- RE: PHP Directory Transversal Ravish (Mar 13)
- Re: PHP Directory Transversal David M. Zendzian (Mar 13)
- Re: PHP Directory Transversal John GALLET (Mar 18)
  - Re: PHP Directory Transversal Andres Molinetti (Mar 18)
    - Re: PHP Directory Transversal Alex 'CAVE' Cernat (Mar 20)