Points: 200 Description: Darkcoder found a flaw in realistic 12 that allowed him to read any file through the guest.pl script. The bug was that user-input was checked before the uri escape was done, allowing him to specify any character he wanted.
Lectures
No Lectures Given
Comments temporarily disabled.
This site is the collective work of the
HackThisSite staff. Please don't reproduce in part or whole without permission.
Page Generated: Sat, 07 Nov 2009 21:43:29 +0000 Exec:
36 Page loaded in 0.04843 seconds! Current Code Revision: 75-Stable