Re: Jax Petition Book (languagepack) Remote File Include Vulnerabilities

Actually, this can be pretty serious depending on server settings, but an improper example was given. Better one: jaxpetitionbook.php?languagepack=../../someotherallowedfileuploads/myfile.php.gif00 Many servers will have magic quotes on to defeat the null byte, but by no means all. John...

jax-rfi.txt

------------------------------------------------------------------------------------------------------------------ AYYILDIZ.ORG PreSents... Script: Jax Petition Book Download: jtr.de/scripting/php/guestbook/petitionbook%20v1.0.3.06.zip Contact: ilker Kandemir...