Home of WhiteHat CyberArmy
 
HomeFAQSearchMemberlistUsergroupsRegisterLog in

Share | 
 

 XAMPP Local Write Access

Go down 
AuthorMessage
W-P
Admin
avatar

Posts : 80
Join date : 2013-11-12
Age : 32
Location : Cyber World

PostSubject: XAMPP Local Write Access   Tue Nov 12, 2013 12:53 pm

#######################################################
#
# [+] Exploit Title: XAMPP All Version Local Write Access Vulnerability
# [+] Google Dork 1 : inurl:/xampp/lang.php
# [+] Google Dork 2 : inurl:/security/lang.php
# [+] Date: 15/10/2013
# [+] Discovered By : Black.Hack3r
# [+] Exploit Author: Iranian_Dark_Coders_Team
# [+] Vendor Homepage: [You must be registered and logged in to see this link.]
# [+] Version: All Version
# [+] Tested on: Windows 7
########################################################
#
# [+] BACKGROUND:
#
# XAMPP is a free and open source cross-platform web server solution stack
# package, consisting mainly of the Apache HTTP Server, MySQL database, and
# interpreters for scripts written in the PHP and Perl programming languages.
#
#######################################################
#
# [+] DESCRIPTION:
#
# It has been detected than an unprivileged user can write in the local
# disk and the local file "lang.tmp" can be modified in the remote machine.
# The injection is done through the page "/xampp/lang.php".
#
#######################################################
#
# [+] VULNERABILITY:
#
# XAMPP All Version Local Write Access Vulnerability
#
#######################################################
#
# [+] Exploit:
#
# [You must be registered and logged in to see this link.]
# [You must be registered and logged in to see this link.]
#
#######################################################
#
# [+] Proof:
#
# [You must be registered and logged in to see this link.]
# [You must be registered and logged in to see this link.]
#
# Example 1 : [You must be registered and logged in to see this link.]
# Example 2 : [You must be registered and logged in to see this link.]
#
# And next, if we access to the file:
#
# [You must be registered and logged in to see this link.]
# [You must be registered and logged in to see this link.]
#
#######################################################
#
# [+] Demo site:
#
# [You must be registered and logged in to see this link.]
# [You must be registered and logged in to see this link.]
# [You must be registered and logged in to see this link.]
# [You must be registered and logged in to see this link.]
# [You must be registered and logged in to see this link.]
# [You must be registered and logged in to see this link.]
# [You must be registered and logged in to see this link.]
# [You must be registered and logged in to see this link.]
#
#######################################################
#
# [+] Discovered By : Black.Hack3r
# [+] We Are : M.R.S.CO,Black.Hack3r,N3O
# [+] SpTnx : Mr.Cicili,Sec4ever,D$@d_M@n,shahram black hat,MR.0x41,C@M!S3R_H3X,M4H4N,Security,@3is,HOt0N,All Members In [You must be registered and logged in to see this link.]
# [+] Home : [You must be registered and logged in to see this link.]
#
#######################################################
Back to top Go down
View user profile http://whitehatcyberarmy.forumotion.com
 
XAMPP Local Write Access
Back to top 
Page 1 of 1

Permissions in this forum:You cannot reply to topics in this forum
Home of Ethical WhiteHat CyberArmy :: WhiteHat CyberArmy Community :: Exploits and Vulnerabilities-
Jump to: