CVE-2008-6002: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when registerglobals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation parameter...

webcp-disclose.txt

webcp 0.5.7 sendfile.php filelocation Remote File Disclosure Vulnerability Script : http://www.web-cp.net/releases/webcp-0.5.7.tar.gz Demo : http://gyrbo.madoka.be/web-cp/ Vuln : if $tf = fopen$filelocation, "r" // Date in the past POC :...

webcp 0.5.7 (filelocation) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications =============================================================== webcp 0.5.7 filelocation Remote File Disclosure Vulnerability =============================================================== webcp 0.5.7 sendfile.php filelocation Remote File...

webcp 0.5.7 - filelocation Remote File Disclosure

webcp 0.5.7 - filelocation Remote File Disclosure webcp 0.5.7 sendfile.php filelocation Remote File Disclosure Vulnerability Script : http://www.web-cp.net/releases/webcp-0.5.7.tar.gz Demo : http://gyrbo.madoka.be/web-cp/ Vuln : if $tf = fopen$filelocation, "r" // Date in the past POC :...

webcp 0.5.7 - 'filelocation' Remote File Disclosure

webcp 0.5.7 sendfile.php filelocation Remote File Disclosure Vulnerability Script : http://www.web-cp.net/releases/webcp-0.5.7.tar.gz Demo : http://gyrbo.madoka.be/web-cp/ Vuln : if $tf = fopen$filelocation, "r" // Date in the past POC :...