EDB-5575

functional

Admidio 1.4.8 - 'getfile.php' Remote File Disclosure

view exploit source exploit_dbverifiedtype webappsauthor n3v3rh00dpublished 2008-05-09catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2008-5209USmedium5.0Exploit
Directory traversal vulnerability in modules/download/get_file.php in Admidio 1.4.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan