CVE-2007-2986

PHP remote file inclusion vulnerability in lib/livestatus.lib.php in AdminBot MX 9.0.5 allows remote attackers to execute arbitrary PHP code via a URL in the ROOT parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in lib/livestatus.lib.php in AdminBot MX 9.0.5 allows remote attackers to execute arbitrary PHP code via a URL in the ROOT parameter...

Immunity Canvas: ADMINBOT_INCLUDE

Name| adminbotinclude ---|--- CVE| CVE-2007-2986 Exploit Pack| CANVAS Description| AdminBot-MX Remote file inclusion Notes| References: http://www.securityfocus.com/bid/24231 CVE Name: CVE-2007-2986 VENDOR: Nexen Notes: None Repeatability: Infinite Date public: 05/30/07 CERT Advisory: None CVE Ur...

CVE-2007-2986

AdminBot MX 9.0.5 contains a PHP remote file inclusion vulnerability in lib/live_status.lib.php where the ROOT parameter can be used to load arbitrary PHP code, enabling remote code execution. Exploitation details and references are listed (e.g., Exploit-DB, X-Force). The documents do not specify...

adminbot-rfi.txt

AdminBot-MX Remote file inclusion Download script : http://download.nexen.org/tools/adminbot/adminbothttp-mxb2.tar.gz Thanks Str0ke :D Exploit : http://127.0.0.1/adminbotpath/lib/livestatus.lib.php?ROOT=shell.txt? Discovered by ThE TiGeR MiroTigeratHotmail.com...