Prado Framework sr Parameter Directory Traversal

The version of Prado Framework installed does not sanitize user input to 'sr' parameter of the 'test/testtools/functionaltests.php' before using it to return the contents of the file. An unauthenticated, remote attacker can exploit this issue to retrieve arbitrary files outside of the server's ro...

PRADO PHP Framework 3.2.0 Arbitrary File Read Vulnerability

Exploit for php platform in category web applications PRADO PHP Framework 3.2.0 Arbitrary File Read Vulnerability Vendor: Prado Software Product web page: http://www.pradosoft.com Affected version: 3.2.0 r3169 Summary: PRADO is a component-based and event-driven programming framework for developi...

[NEWS] PRADO 'page' Parameter Allows Code Execution

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...