ComVironment libraries/grab_globals.lib.php inc_dir Variable Remote File Inclusion

2007-01-18T21:32:51
ID OSVDB:34621
Type osvdb
Reporter OSVDB
Modified 2007-01-18T21:32:51

Description

Manual Testing Notes

/libraries/grab_globals.lib.php?inc_dir=[Evil-Code]

References:

ISS X-Force ID: 31564 Generic Exploit URL: http://milw0rm.com/exploits/3152 CVE-2007-0395 Bugtraq ID: 22108