DbbS script.php Multiple Variable Path Disclosure

2006-04-16T03:03:42
ID OSVDB:24956
Type osvdb
Reporter OSVDB
Modified 2006-04-16T03:03:42

Description

Manual Testing Notes

http://[target]/DbbS/script.php?unavariabile[]= http://[target]/DbbS/script.php?GLOBALS[]= http://[target]/DbbS/script.php?_SERVER[]=

References:

Vendor URL: http://www.dbbs.sup.fr/ Related OSVDB ID: 24957 Related OSVDB ID: 24958 Related OSVDB ID: 24955 Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-04/0327.html CVE-2006-1914