Jax Petition Book 3.06 jax_petitionbook.php languagepack Parameter Local File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/22072/info Jax Petitionbook is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal string...

Jax Petitionbook Language参数多个本地文件包含漏洞

Jax Petitionbook是一款基于PHP的WEB应用程序。 Jax Petitionbook不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB进程权限查看系统文件内容。 问题是多个脚本对用户提交的'language'参数缺少过滤，提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB进程权限查看系统文件内容。 Jax Scripts Jax Petitionbook 3.06 目前没有解决方案提供： http://www.jtr.de/scripting/php/...

Jax Petition Book 3.06 - jax_petitionbook.php?languagepack Local File Inclusion

Jax Petition Book 3.06 - jaxpetitionbook.php?languagepack Local File Inclusion source: https://www.securityfocus.com/bid/22072/info Jax Petitionbook is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these...

Jax Petition 3.06 Book - smileys.php?languagepack Local File Inclusion

Jax Petition 3.06 Book - smileys.php?languagepack Local File Inclusion source: https://www.securityfocus.com/bid/22072/info Jax Petitionbook is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these...

Jax Petition Book 3.06 - 'jax_petitionbook.php?languagepack' Local File Inclusion

source: https://www.securityfocus.com/bid/22072/info Jax Petitionbook is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to have local script code execut...

Jax Petition 3.06 Book - 'smileys.php?languagepack' Local File Inclusion

source: https://www.securityfocus.com/bid/22072/info Jax Petitionbook is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to have local script code execut...