Directory traversal

Directory traversal vulnerability in getgalldata.php in fuzzylime cms 3.0 and earlier allows remote attackers to include arbitrary local files via a .. dot dot in the p parameter...

CVE-2007-4805

Directory traversal vulnerability in getgalldata.php in fuzzylime cms 3.0 and earlier allows remote attackers to include arbitrary local files via a .. dot dot in the p parameter...

CVE-2007-4805

CVE-2007-4805 affects fuzzylime (CMS) getgalldata.php in version 3.0 and earlier. A directory traversal flaw lets remote attackers include arbitrary local files by supplying .. in the p parameter. The root cause is unvalidated path input leading to local file inclusion. Public references in conne...

fuzzylime cms getgalldata.php本地文件包含漏洞

fuzzylime cms是一款基于PHP的WEB应用程序。 fuzzylime cms不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 问题是由于'getgalldata.php'脚本对用户提交的WEB参数缺少过滤，提交系统文件作为包含对象，可导致以WEB权限查看系统文件内容。 fuzzylime cms 3.0 目前没有详细解决方案提供： http://cms.fuzzylime.co.uk/...

fuzzylime cms <= 3.0 Local File Inclusion Vulnerability

No description provided by source. not sec group http://www.notsec.com [email protected] fuzzylime cms = 3.0 Class: Local File Inclusion Found: 08/09/2007 Site: http://cms.fuzzylime.co.uk/ Download: http://cms.fuzzylime.co.uk/files/cms.zip Author: wHITeShEEp of notsec Contact: [email protected]...

fuzzylime cms <= 3.0 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================= fuzzylime cms Exploit: Work only with magicquotesgpc = Off input name="p" type="text" size="30" value="../../../../../../../../ etc/passwd%00"...

Fuzzylime CMS 3.0 - Local File Inclusion

not sec group http://www.notsec.com [email protected] fuzzylime cms Exploit: Work only with magicquotesgpc = Off Thanks to:...