PHPay 2.2 – Multiple Full Path Disclosure Vulnerabilities

漏洞ID	1053817	漏洞类型
发布时间	2003-04-09	更新时间	2003-04-09
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	PHP	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/22477

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/7309/info

phPay has been reported prone to multiple path disclosure vulnerabilities.

It has been reported that when specially crafted requests are made for many phPay pages and include files, an error condition may be triggered. The resulting error message may contain path information relative to the phPay installation and requested file.

Information gathered in this way may be used in further attacks against the system.

This vulnerability has been reported to affect phPay version 2.02. However, previous versions may also be affected. 

http://www.example.com/login.phpsess=your_session_id&abt=&new_lang=99999&caller=navlang

http://www.example.com/start.php?config=alper.inc.php

相关推荐: NT Help File Buffer Overflow Vulnerability

NT Help File Buffer Overflow Vulnerability 漏洞ID 1104716 漏洞类型 Boundary Condition Error 发布时间 1999-05-17 更新时间 1999-05-17 CVE编号 N/A CN…