CVE-2008-4522

Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers to include and execute arbitrary local files via a .. dot dot in the src parameter to 1 listen.php and 2 download.php...

Directory traversal

Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers to include and execute arbitrary local files via a .. dot dot in the src parameter to 1 listen.php and 2 download.php...

CVE-2008-4522

CVE-2008-4522 describes multiple directory traversal vulnerabilities in the JMweb MP3 Music Audio Search and Download Script. The issue allows remote attackers to cause inclusion and execution of arbitrary local files by manipulating the src parameter (via ..) in the listen.php and download.php s...

CVE-2008-4522: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers to include and execute arbitrary local files via a .. dot dot in the src parameter to 1 listen.php and 2 download.php...

jmweb-lfi.txt

JMweb MP3 src Multiple Local File Inclusion + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke,Codex Script Homepage: http://www.jesse-web.co.cc // + Download :...

JMweb - 'src' Local File Inclusion

JMweb MP3 src Multiple Local File Inclusion + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke,Codex Script Homepage: http://www.jesse-web.co.cc // + Download :...