GuestBook Script <= 1.7 (include_files) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ===================================================================== GuestBook Script ' . $txt'txtfilenotfound' . ': ' . $val . ''; $tpl-register'guest', $key; ... here is includecontent function: function includecontent$path if isfile$pa...

Guestbook Script 1.7 - 'include_files' Remote Code Execution

!/usr/bin/perl use IO::Socket; print "guestbook script ' . $txt'txtfilenotfound' . ': ' . $val . ''; $tpl-register'guest', $key; ... here is includecontent function: function includecontent$path if isfile$path obstart; include$path; $content = obgetcontents; obendclean; if isset$content return...