3 matches found
CVE-2006-6757: Undefined Security Weakness
Directory traversal vulnerability in index.php in cwmExplorer 1.0 allows remote attackers to read arbitrary files and source code, and obtain sensitive information via directory traversal sequences in the showfile parameter...
CWMExplorer Index.PHP源代码信息泄露漏洞
CWMExplorer是一款基于PHP的WEB应用程序。 CWMExplorer不正确过滤用户提交的输入,远程攻击者可以利用漏洞获得敏感信息。 问题是'index.php'脚本对用户提交的'file'参数缺少过滤,提交脚本文件作为参数,可导致源代码泄露。 cwm-design cwmExplorer 1.0 http://explorer.cwm-design.de/ http://www.example.com/path/index.php?d=0&showfile=file...
cwmExplorer 1.0 - show_file Source Code Disclosure
cwmExplorer 1.0 - showfile Source Code Disclosure Title : cwmExplorer 1.0 showfile Source Code Disclosure Vulnerability Author : ajann Contact : : ERROR------------------------------------------------------ .... .. $datei = "dirs/".$d."/".$GETshowfile;...