Description
Directory traversal vulnerability in index.php in Noah Medling RCBlog 1.03 allows remote attackers to read arbitrary .txt files, possibly including one that stores the administrator's account name and password, via a .. (dot dot) in the post parameter.
References
- 20060120 [eVuln] RCBlog Directory Traversal & Sensitive Information Disclosure mailing-list
- 16342 vdb-entry
- 1015523 vdb-entry
- rcblog-index-directory-traversal(24248) vdb-entry
- 22680 vdb-entry
- 20060218 RCblog exploit [fun] mailing-list
- rcblog-index-file-include(27042) vdb-entry
- 18547 third-party-advisory
- http://evuln.com/vulns/42/summary.html
- 20060611 RCblog 1.03 Directory Traversal [index.php] mailing-list
- http://www.fluffington.com/index.php?page=rcblog