This exploit demonstrates a directory traversal vulnerability in the Gkplugins Picasaweb plugin, allowing unauthorized file download via manipulated GET parameters. The PoC shows how an attacker can access arbitrary files by traversing directories.
Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:Gkplugins Picasaweb (version unspecified)
No auth needed
Prerequisites:Access to the vulnerable plugin endpoint