search

kurobeats / fimap

fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs in webapps.
GNU General Public License v2.0
521 stars 99 forks source link

AttributeError: 'codeinjector' object has no attribute 'setUserAgent' #19

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
On which URL this error occures? (Important!)
http://www.ppnegocios.com

Which version of fimap you are using? (You can see that in the very first
line)
Fimap 0.7svn 

On what operating system?
Linux CentOs

Please provide any additional information below.

################################################################################
############
#:: FI Bugs on 
'www.ppnegocios.com' ::                                                     
#
################################################################################
############
#[1] URL: '/?link=credito.php' injecting file: '/proc/self/environ' using 
param: 'link'    #
#[2] URL: '/?link=credito.php' injecting file: 'php://input' using param: 
'link'           #
#[q] 
Quit                                                                            

#
################################################################################
############
Choose vulnerable script: 1
[INFO] Testing php-code injection thru User-Agent...
Traceback (most recent call last):
  File "./fimap.py", line 237, in <module>
    list_results()
  File "./fimap.py", line 150, in list_results
    c.start()
  File "/home/jbpm/.fm/codeinjector.py", line 101, in start
    code = self.__doHaxRequest(url, mode, settings["php_info"][0], suffix)
  File "/home/jbpm/.fm/codeinjector.py", line 197, in __doHaxRequest
    self.setUserAgent(userload)
AttributeError: 'codeinjector' object has no attribute 'setUserAgent'

Original issue reported on code.google.com by mexw...@gmail.com on 14 Dec 2009 at 8:11

GoogleCodeExporter commented 9 years ago 
I cant inject with /proc/self/enviroment on any Host!
im using the last nightly file added.

Greets

Original comment by mexw...@gmail.com on 14 Dec 2009 at 8:15

GoogleCodeExporter commented 9 years ago 
Hi mex. This is already fixed in SVN :)
Wait for next nightly built or get SVN snapshot.

-imax

Original comment by fimap....@gmail.com on 14 Dec 2009 at 10:21