VirtueMart wordpay_notify.php mosConfig_absolute_path Variable Remote File Inclusion

2006-09-09T14:22:11
ID OSVDB:30798
Type osvdb
Reporter OSVDB
Modified 2006-09-09T14:22:11

Description

Manual Testing Notes

http://[target]/%5bpath%5d/worldpay_notify.php?mosConfig_absolute_path=shell

References:

Mail List Post: http://archives.neohapsis.com/archives/vuln-dev/2006-q3/0044.html