OxYProject 0.85 - 'edithistory.php' Remote Code Execution
OxYProject 0.85 edithistory.php Remote Code Execution Vulnerability Script : http://puzzle.dl.sourceforge.net/sourceforge/oxyproject/OxYBox085uns.zip Code Vuln : Ln 24 include'oxycfg.php'; // // Editing the Chat History // $editfile = $file'ChatHistory'; $fh = fopen$editfile, 'a' or die"Error...