ClipSharePro <= 4.1 - Local File Inclusion

No description provided by source. Exploit Title : ClipSharePro = 4.1 Local File Inclusion Date : 2013/3/9 Exploit Author : Saadat Ullah ? saadilinuxatrocketmaildotcom Software Link : http://www.clip-share.com Author HomePage: http://security-geeks.blogspot.com Tested on: Server : Apache/2.2.15...

ClipShare Pro 'ubr_link_upload.php'本地文件包含漏洞

Bugtraq ID:66073 ClipShare Pro是一款基于WEB的视频共享应用。 ClipShare Pro 'ubrlinkupload.php'不正确过滤用户提交的输入，允许远程攻击者利用漏洞提交特殊的请求，以WEB权限查看系统文件内容。 0 ClipShare Pro 4.1 目前没有详细解决方案提供： htpp://www.clip-share.com http://localhost/clips/ClipSharePro/ubrlinkupload.php?configfile=/etc/passwd...

ClipSharePro 4.1 Local File Inclusion

Exploit Title : ClipSharePro 0 $configfile = $GET'configfile'; else showAlertMessage"ERROR: Failed to find configfile parameter", 1; else $configfile = $DEFAULTCONFIG; // Load config file require $configfile; //including arbitrary file $GET'configfile' echo $configfile; The vulnerability can be...

ClipSharePro 4.1 - Local File Inclusion

Exploit Title : ClipSharePro 0 $configfile = $GET'configfile'; else showAlertMessage"ERROR: Failed to find configfile parameter", 1; else $configfile = $DEFAULTCONFIG; // Load config file require $configfile; //including arbitrary file $GET'configfile' echo $configfile; The vulnerability can be...