Access to "any" file

Status: Beta

Brought to you by: zkara

#19 Access to "any" file

Status: open

Owner: nobody

Labels: None

Priority: 5

Updated: 2006-07-26

Created: 2006-07-26

Creator: Anonymous

Private: No

I can view almost any file on computer. For
instance /etc/passwd.

http://localhost/view.php?cd=&what=&f=../../../etc/passwd

Discussion

txyoji - 2009-01-13

Wow. That's a big bug.
Thank you for reporting that.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Log in to post a comment.