eDNews 2.0 - (lg) Local File Inclusion Vulnerability

No description provided by source. | | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | | | / \ | || | | | | | || || \ || // \ | | | eDNews v2 lg Local File Inclusion Vulnerability Script :...

CVE-2008-5819: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in eDNewsarchive.php in eDreamers eDNews 2, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lg parameter. NOTE: some of these details are obtained from third party information...

eDNews V2 Local File Inclusion

| | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | | | / \ | || | | | | | || || \ || // \ | | | eDNews v2 lg Local File Inclusion Vulnerability Script : http://www.mirrorservice.org/sites/download.sourceforge.net/pub/sourceforge/e/ed/edscontacts/eDNewsv2.zip Poc :...