3 matches found
webSPELL <= 4.2.0d Local File Disclosure Exploit (.c linux)
No description provided by source. / webSPELL = 4.2.0d Local File Disclosure Exploit .c linux by Juri Gianni aka yeat - stakerathotmaildotit Description ----------- webSPELL contains one flaw that allows an attacker to disclose a local file. The issue is due to 'picture.php' script not properly...
webSPELL 4.2.0d (Linux) - Local File Disclosure
/ webSPELL ------------------------------ Possible Fix: $file = pregreplace'/^a-zA-Z0-9/','',addslashes$GET'id'; otherwise if $GET...
webSPELL 4.2.0d (Linux) - Local File Disclosure (C)
webSPELL 4.2.0d Linux - Local File Disclosure C / webSPELL ------------------------------ Possible Fix: $file = pregreplace'/^a-zA-Z0-9/','',addslashes$GET'id'; otherwise if $...