e-Ark ark_inc.php cfg_pear_path Variable Remote File Inclusion

2006-11-21T07:18:49
ID OSVDB:30651
Type osvdb
Reporter OSVDB
Modified 2006-11-21T07:18:49

Description

Manual Testing Notes

http://[target]/[path]/src/ark_inc.php?cfg_pear_path=http://

References:

Secunia Advisory ID:23059 ISS X-Force ID: 30457 Generic Exploit URL: http://www.milw0rm.com/exploits/2818 FrSIRT Advisory: ADV-2006-4661 CVE-2006-6086 Bugtraq ID: 21224