Directory traversal

Directory traversal vulnerability in team.rc5-72.php in DNET Live-Stats 0.8 allows remote attackers to read arbitrary files via a .. dot dot in the showlang parameter...

DNET Live-Stats 'team.rc5-72.php' Local File Include Vulnerability

DNET Live-Stats is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to view files and execute local scripts in the context of the webserver process. This may aid in...

DNET Live-Stats 0.8 Local File Inclusion

Exploit Title: DNET Live-Stats 0.8 Local File Inclusion Date: 10-04-10 Author: Blake Software Link: http://sourceforge.net/projects/dnetlivestats/files/0.8/dnet-live-stats-0.8-rc8.zip/download Version: 0.8 rc8 Tested on: Windows XP SP3 running xampp lite The showlang parameter does not properly...