Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:14504
HistorySep 29, 2006 - 12:00 a.m.

Tagmin C.C 2.1.B Remote File Include

2006-09-2900:00:00
vulners.com
78

Tagmin C.C 2.1.B Remote File Include
########################################
+Advisory #3
+LMS 1.12 Sql Injection
+Product :Tagmin Control Center 2.1.B
+Develop: http://ds3.bbminc.net/tagit2b/
+Dork: inurl:"/tagit2b/"
+Vulnerable: Remote File Include
+Risk:High
+Discovered:by Kernel-32
+Contact: [email protected]
+Homepage: http://kernel-32.blogspot.com
+Greetz: BeLa ;)
########################################
Vulnerable code:

if(isset($_GET['load']) && $_GET['load'] == "dtu" or $_GET['load'] == "tag") {
include("$page.php");
}
else {
include("tagviewer.php");
}
?>


Vulnerable:
http://site/path/index.php?page=shell