Bugtraq mailing list archives

Re: CitrusDB 2.4.1 - LFI/SQLi Vulnerability

From: mbsarwin () singnset com sg
Date: Tue, 10 Jul 2012 15:23:12 GMT

Hi I tried this LFI. it does not display the /etc/password file. So ver 2.4.1. seems protected. looks like it is a 
false alarm.