Directory traversal

Directory traversal vulnerability in index.php in GeBlog 0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the GLOBALStplname parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php...

geblog01-lfi.txt

!/usr/bin/perl GeBlog 0.1GLOBALStplnameLocal File Inclusion Exploit D.Script: http://sourceforge.net/projects/geblog/ V.Code: include "tpl/".$GLOBALS'tplname'."/html.func.inc.php"; Discovered & Coded by : GolDM = Mahmoodali Contact:[email protected] Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's...

GeBlog 0.1 GLOBALS[tplname] Local File Inclusion Exploit (win)

Exploit for unknown platform in category web applications ============================================================== GeBlog 0.1 GLOBALStplname Local File Inclusion Exploit win ============================================================== !/usr/bin/perl GeBlog 0.1GLOBALStplnameLocal File...