high7.8Public exploit code
CVE-2006-6569
form.php in GenesisTrader 1.0 allows remote attackers to read source code for arbitrary files and obtain sensitive information via the (1) do and (2) chem para…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GenesisTrader 1.0 - 'form.php' Arbitrary File Source Disclosure2006-12-14 · webapps · php · Verified
Impact
form.php in GenesisTrader 1.0 allows remote attackers to read source code for arbitrary files and obtain sensitive information via the (1) do and (2) chem parameters with a "modfich" floap parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Genesistrader | Genesistrader | Version 1.0 |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/2035
- http://www.securityfocus.com/archive/1/454385/100/0/threaded
- http://www.securityfocus.com/bid/21595
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30888
- http://securityreason.com/securityalert/2035
- http://www.securityfocus.com/archive/1/454385/100/0/threaded
- http://www.securityfocus.com/bid/21595
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30888