JAWS 0.3 Security fix
JAWS 0.3 has a security bug in index.php that allows to load files that aren't JAWS gadgets.
Example: http://example.com/index.php?gadget=../../../../../../../etc/passwd%00
To fix this issue, please replace your index.php with this:
http://jaws.com.mx/data/files/index.php.txt
Thanks to Fernando Quintero for report it
.
ion | General | July 1, 10:27am