JAWS index.php path Variable Path Disclosure

2004-07-12T14:00:19
ID OSVDB:7720
Type osvdb
Reporter Fernando Quintero(nando@gigax.org)
Modified 2004-07-12T14:00:19

Description

Manual Testing Notes

http://[victim]/jaws/index.php?gadget=filebrowser&path=/etc

References:

Vendor URL: http://www.jaws.com.mx/ Security Tracker: 1010651 Related OSVDB ID: 7723 Related OSVDB ID: 7724 Related OSVDB ID: 7721 Related OSVDB ID: 7722 Other Advisory URL: http://www.securiteam.com/unixfocus/5KP0H0ADFU.html Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0226.html ISS X-Force ID: 16614 ISS X-Force ID: 16617 Bugtraq ID: 10670