justVisual 2.0 (index.php?p=) Local File Inclusion Vulnerability

[eidelweiss]

Original file or Ref# can be check or see here:
• - http://xforce.iss.net/xforce/xfdb/57174
• - http://secunia.com/advisories/39093
• - http://www.securityfocus.com/bid/38970
• - http://www.exploit-db.com/exploits/11876
  

#########################################################################

[+]Title: justVisual 2.0 (index.php) Local File Vulnerability
[+]Version: 2.0
[+]License: http://www.gnu.org/copyleft/gpl.html
[+]Download: http://fh54.de/justVisual/packages/justVisual2.zip
[+]Risk: Medium
[+]Local: Yes
[-]Remote: No

###########################################################

###########################################################

-=[ VULN CODE ]=-

=[www/index.php]=


$selfname=basename($_SERVER['PHP_SELF'],'.php');
if(isset($_GET['p']) && !empty($_GET['p'])) {
//$selfname=basename($_GET['p'],'.php');
$selfname=str_replace('.php','',$_GET['p']);


-=[ P0C ]=

Http://127.0.0.1/index.php?p=[LFI]

###############################=[E0F]=###################################

[xnagac0de]

mantepp om gimana cara gunainnya...????
maklum newbie.....

[ketek]

sip om eidelweiss... ane salut sama om.
thx udah berbagi ilmu

exploitnya tokcer...

bisa include file dengan ekstensi php semaunya
tpi klo mw include file dengan ektensi lainnya di server harus -> magic_quote = off
gitu ya om ^^


te- o- pe-
btw produktif banget nih om...
bole tau tips and trick nyari vuln???


ditunggu exploit berikutnya

[ziel]

waduh....dijelasin dong om ketek....coz ana ga nyambung sma skali om....

[ian182]

mantep dah tu exploit.php bisa semua:-bd.btw cara nyari yang vuln gimane om?dicari atu atu?

[cancer]

wah bingung ane.....

[eidelweiss]

@cancer: k4n ud4h 4da P0C (Proof Of Concept) d4h complete k4lau nd4k sal4h 1tu m4h :)

@ian182 : w3w ian182 y6 asl1 nd4k n1ch y4ch ( if original mah0k l0e , p4 k4bar om )

@om Ketek : w4h om s4tu in1 m3rendah t3rus ~_~

[akatsuchi]

manteb om..
dicobain yah bugs nya

[eidelweiss]

s1lahkan

btw act1ve jg yach si om akatsuchi..
g1la kag3t gu3..
pag1" gu3 l1at ud4h h4mpir 60% thr3at di comment (pagi" j4m 7:30)

[akatsuchi]

huhuhuhuhu
this is my third home after HN
iseng aja om ...
sambil ngurusi IRC sambil maen2 ke forum

salam kenal om eidelweiss ^_^
silahkan berkunjung ke IRC ( HN-Community.Byroe.net )