CVE-2007-3547

Directory traversal vulnerability in qticheckname.php in QuickTicket 1.2 allows remote attackers to include and execute arbitrary local files a .. dot dot in the lang parameter...

CVE-2007-3547

CVE-2007-3547 describes a directory traversal vulnerability in QuickTicket 1.2. The flaw is in the PHP script qti_checkname.php , where an attacker can influence the lang parameter (using dot-dot sequences) to cause local file inclusion and arbitrary code execution. This is a remote vulnerability...

CVE-2007-3547: Undefined Security Weakness

Directory traversal vulnerability in qticheckname.php in QuickTicket 1.2 allows remote attackers to include and execute arbitrary local files a .. dot dot in the lang parameter...

QuickTicket 1.2 - qti_checkname.php Local File Inclusion

QuickTicket 1.2 - qticheckname.php Local File Inclusion QuickTicket v1.2 Local File Inclusion download: http://www.qt-cute.org/download/qti12.zip found by: katatafish [email protected] vulncode: $strLang = $GET"lang"; include"language/$strLang/qtflangreg.inc"; exploit:...

QuickTicket 1.2 (qti_checkname.php) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== QuickTicket 1.2 qticheckname.php Local File Inclusion Vulnerability ====================================================================== QuickTicket v1.2 Local File...