EUVD-2007-6366

Malware in sbrugna...

Directory traversal

Directory traversal vulnerability in downloadfile.php in PolDoc CMS aka PDDMS 0.96 allows remote attackers to read arbitrary files via a .. dot dot or absolute pathname in the filename parameter...

CVE-2007-6400

Directory traversal vulnerability in downloadfile.php in PolDoc CMS aka PDDMS 0.96 allows remote attackers to read arbitrary files via a .. dot dot or absolute pathname in the filename parameter...

CVE-2007-6400

Directory traversal vulnerability in downloadfile.php in PolDoc CMS aka PDDMS 0.96 allows remote attackers to read arbitrary files via a .. dot dot or absolute pathname in the filename parameter...

CVE-2007-6400

CVE-2007-6400 affects PolDoc CMS (aka PDDMS) 0.96 in download_file.php. The vulnerability is a directory traversal flaw that lets remote attackers read arbitrary files by supplying a .. or absolute path in the filename parameter. This exposes partial confidentiality (per the CVSS 2.0 entry: AV:N/...

PolDoc CMS 0.96 - 'download_file.php' File Disclosure

PolDoc CMS 0.96 downloadfile.php filename Remote File Disclosure Vulnerability D . Script : http://sourceforge.net/project/showfiles.php?groupid=100272 POC : /downloadfile.php?filename=../../../../../../../../etc/passwd milw0rm.com 2007-12-08...

poldoccms-disclose.txt

PolDoc CMS 0.96 downloadfile.php filename Remote File Disclosure Vulnerability D . Script : http://sourceforge.net/project/showfiles.php?groupid=100272 POC : /downloadfile.php?filename=../../../../../../../../etc/passwd...

PolDoc CMS 0.96 - download_file.php File Disclosure

PolDoc CMS 0.96 - downloadfile.php File Disclosure PolDoc CMS 0.96 downloadfile.php filename Remote File Disclosure Vulnerability D . Script : http://sourceforge.net/project/showfiles.php?groupid=100272 POC : /downloadfile.php?filename=../../../../../../../../etc/passwd milw0rm.com 2007-12-08...

PolDoc CMS 0.96 (download_file.php) File Disclosure Vulnerability

No description provided by source. PolDoc CMS 0.96 downloadfile.php filename Remote File Disclosure Vulnerability D . Script : http://sourceforge.net/project/showfiles.php?groupid=100272 POC : /downloadfile.php?filename=../../../../../../../../etc/passwd milw0rm.com 2007-12-08...

PolDoc CMS 0.96 (download_file.php) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================= PolDoc CMS 0.96 downloadfile.php File Disclosure Vulnerability ================================================================= PolDoc CMS 0.96 downloadfile.php filename...